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ABSTRACT 

PURPOSE: To decrease the number of rules for checking by using a rule 
for checking in the general-use " and diverting the same rule between 
different types of terminals . 



CONSTITUTION: The meaning extracting part 6 of a specification checking 
part 5 retrieves a meaning network memory part 3 by a shown processing 22 
and extracts all higher level concepts of the condition expressed by a 
condition descriptor 20. In the same manner, the higher level concept 
concerning an even descriptor 21 is also extracted from a meaning network 
memory part 3. Next, by the processing by a rule retrieving part 7, a 
rule memory part 4 for checking is retrieved, and the rule is searched 
for the noticed condition, namely, including any element of 'off-hook 1 , 
'signal phase', 'figure input possible', and 1 TONE <DT) .,' . By the decision, 
when it is confirmed that the retrieval of the rule is wholly completed, 
the relation of the condition descriptor 20 with the even descriptor 21 is 
handled as it is right, for example, by an as-shown call a processing 
program generating part 11, converted to a program language. 
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Remote monitoring method for locally detected event utilizing an 

integrated information system has central server which is capable of 

processing data from multiple premises servers . 
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Abstract (Basic) : WO 200227518 Al 

NOVELTY - A premises server (32) is in communication with a variety 
of information sources that produce monitoring system data for a 
premises. The premises server collects, presents and transmit the 
motion detection data to a central server (56) over the internet (20). 
Where the central server is capable of processing data from multiple 
premises servers . 

DETAILED DESCRIPTION - The central server receives the data and 
traverses one or more logical rule sets to determine whether a motion 
has been detected. Based on the detection of motion, the central server 
generates output in t he form of communication to one or more 
authorized users via a variety .of communication mediums and devices 
and/or the instigation of variety of acts corresponding to the 
evaluation of the rules . 

An INDEPENDENT CLAIM is also included for the system for 
implementing an integrated information system and a computer readable 
medium having computer-executable instructions. 

USE - locally detected event utilizing an integrated information 
system including intrusion detecting devices, such as door or window 
contacts, glass break detectors, motion detectors and closed -circuit 
f.eievision (CCTV) , badging systems, asset tracking and access control 
devices and sensors. 

ADVANTAGE - The integrated information system can obtain any 
variety of monitoring device inputs, process any combination of the 
inputs, and provide customized outputs according to the needs and 
rights of an authorized user. 

DESCRIPTION OF DRAWING (S) - Drawing shows a block diagram of an 
integrated information system. 

Internet (20) 

Premises server (32) 

Central server (56) 
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Distributed configuration utility for use in factory, has server agent in 
remote node, which notifies configuration editor of existing data 



access server and establishes interface between editor and server 
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Abstract (Basic): WO 200223875 Al 

NOVELTY - A database has a set of configuration rules stored in 
association with several data access servers . A server agent 
located in a remote computing node (250) notifies the configuration 
editor of existing data access server and facilitates establishment of 
configuration interface between the editor and server. 

USE - Distributed configuration utility for use in factory and 
plant . 

ADVANTAGE - Several data access servers are configured without 
physically going to each node on a network and hence establishes 
centralized utility. 

DESCRIPTION OF DRAWING (S) - The figure shows the set of components 
forming the client and server components. 

Remote computing node (250) 
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Distributed object filtering method 
application, involves applying load 
alarm and forwarding related alarm 



in client server network management 
distribution policy based filter to 

notification to management 



application 
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Abstract (Basic) : US 6255943 Bl 

NOVELTY - The alarms are generated from multiple network 
management servers . Load distribution policy based filters are 
assigned to network management servers (12) and associated network 
management applications (24). The assigned policy based filter is 
applied to alarm which satisfies filters criteria and corresponding 
alarm notification is forwarded to associated network management 
applicat ion . 

DETAILED DESCRIPTION - An INDEPENDENT CLAIM is also included for 
distributed object filtering apparatus. 

USE - For filtering distributed object in client-server network 
management applications. 

ADVANTAGE - Performance and reliability of client-server 
application is increased by distributing the filtering requirement over 
both server and client depending on resources available and 
preferences. This allows more flexibility in tuning such applications 
for optimal performance. 

DESCRIPTION OF DRAWING (S) - The figure shows the block diagram of 
alarm notification manager for use with multiple network management 
servers and associated applications. 

Network management servers (12) 

Associated network management applications (24) 
pp; 23 DwgNo 2/19 
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Computer for intelligently coordinating data capture requests in a 
network including a number of such computers which route requests to 
servers which are dynamically configured by the computer 
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Abstract (Basic) : WO 200101297 Al 

NOVELTY - Clusters of servers are each controlled by an 
aggregator computer which intelligently co-ordinates data capture 
requests. The aggregators receive and respond to the requests by 
assigning and if necessary reconfiguring the servers. User actions in 
business application programs are monitored and if they are useful for 
data capture are recorded as events which may subsequently be 
accessed independently of the business applications for data capture. 
The data capture and business applications can run independently. A 
configurable server is described. 

DETAILED DESCRIPTION - INDEPENDENT CLAIMS are included for 

(a) a method of capturing data from a server in a network 

(b) a method of creating a dynamic event for use in data capture 

(c) a method of processing a dynamic event for data capture 

(d) a server computer for use in data capture 

(e) a method of implementing a business policy for use in data 
capture . 

USE - In data mining. 

ADVANTAGE - Expandable network structure allowing for increasing 
storage capacities and for the execution of business applications and 
the gathering of data to function independently. 
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Configuring method of software application on cluster, by forming data 
indicating successful installation of software application on cluster 
when configuration slaves successfully complete 
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Abstract (Basic) : US 6173420 Bl 

NOVELTY - Based on one or more fail over policies that apply to a 
cluster which includes multiple nodes , a set of nodes that 



belong to the cluster that must be able to execute a software 
application are identified. Configuration slaves are made to 
automatically perform a series of actions required to configure the 
software application on the set of nodes. 

DETAILED DESCRIPTION - Data indicating successful installation of 
software application on the cluster are generated when the 
configuration slaves successfully complete the series of actions. 
INDEPENDENT CLAIMS are also included for the following: 

(a) a computerized system; 

(b) and a computer-readbale medium for storing a program for 
configuring a software application to run on a cluster. 

USE - For configuring on a cluster a software application that is 
not necessarily designed for execution on a cluster in a computer 
network. . 

ADVANTAGE - Reduces complexity of configuring software in clusters 
that employ fail over policies . Stand alone application can be turned 
into fail safe application automatically with minimal expertise 
required of user of application. Cluster configuration process is made 
atomic, automatic, and significantly faster and less error-prone than 
manual cluster-wide configurations by automatically configuring 
software on cluster and automatically rolling back changes on all 
cluster nodes in event of error during configuration process. 

DESCRIPTION OF DRAWING (S) - The figure shows a block diagram of a 
computerized system that includes a cluster that may be configured to 
execute a software application. 
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Abstract (Basic) : WO 9826555 A 

The method involves detecting an event associated with a client 
system in a computer network which includes several client systems 
(102) connected via modems (104) and a routing system (106) to several 

servers (108). One or more filtering rules are selected, based on 
the type of event detected. 

A packet filter is established in the computer network, in which 
!'he packet filter uses the selected rules to selectively discard 
;'-vke;.s originating at the client system associated with the detected 
event . Preferably the detected event is the assignment of an IP 
i ici^s to the client system. 

ADVANTAGE - Allows routers to be automatically reconfigured when 
seJecued events occur in system. 
Dwg .1/9 
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Abstract (Basic): WO 9631035 A 

The alarm notification method involves receiving alarms from 
multiple servers . Policy -based filters are assigned to one or more 
associated applications. The assigned policy -based filters are 
applied to the alarms. An alarm notification is generated for those 
alarms which pass the filters. The notification is forwarded to the 
one or more associated applications. 

Preferably, several filters comprising a policy to the one or 
more associated applications. Each filter comprises at least one filter 
parameter. The applying step comprises performing a logical AND of all 
parameters within one filter and performing a logical OR between all 
filters within one policy . 

ADVANTAGE - Provides greater control over which alarms are reported 
to network management applications. Ensures consistency of reported 
alarms across multiple network management applications. Communication 
network administrators can be notified over public telephone system 
regarding failures on large and complex network with accuracy and 



regarding only failures that are critical for maintaining performance 
of network. 
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by event processing machine during program execution 

Patent Assignee: ICL SYSTEMS AB (INCM ); ICL DATA AB (INCM ) 

Inventor: SKAGERLING L 

Number of Countries: 020 Number of Patents: 013 
Patent Family: 

Kind Date Applicat No Kind Date Week 

B 



Patent No 


Kind 


Date 


Applicat No 


Kind 


Date 


Week 


WO 


9300632 


Al 


19930107 


WO 


92SE456 


A 


19920622 


199304 


SE 


9101942 


A 


19921221 


SE 


911942 


A 


19910620 


199306 


AU 


9221981 


A 


19930125 


AU 


9221981 


A 


19920622 


199319 


SE 


470031 


B 


19931025 


SE 


911942 


A 


19910620 


199345 


FI 


9305637 


A 


19931215 


WO 


92SE456 


A 


19920622 


199408 










FI 


935637 


A 


19931215 




EP 


591345 


Al 


19940413 


EP 


92913572 


A 


19920622 


199415 










WO 


92SE456 


A 


19920622 




JP 


6509431 


W 


19941020 


wo 


92SE456 


A 


19920622 


199501 










JP 


93501185 


A 


19920622 




AU 


658654 


B 


19950427 


AU 


9221981 


A 


19920622 


199525 




59134 5 


Bl 


19960501 


EP 


92913572 


A 


19920622 


199622 










wo 


92SE456 


A 


19920622 






k&'/I 03^9 


E 


19960605 


DE 


610399 


A 


19920622 


199628 










EP 


92913572 


A 


19920622 












wo 


92SE456 


A 


19920622 




ES 


2089539 


T3 


19961001 


EP 


92913572 


A 


19920622 


199645 


US 


5621663 


A 


19970415 


WO 


92SE456 


A 


19920622 


199721 










US 


94170193 


A 


19940207 












US 


95428472 


A 


19950426 




FI 


104018 


Bl 


19991029 


WO 


92SE456 


A 


19920622 


199951 










FI 


935637 


A 


19931215 





Priority Applications (No Type Date) 
Cited Patents: 2.Jnl.Ref; EP 257241; 

US 3906454 
Patent Details: 

Patent No Kind Lan Pg Main IPC 
WO 9300632 Al E 19 G06F-011/34 
Designated States (National): AU 
Designated States (Regional) : AT 
SE 9101942 A G06F-011/30 
AU 9221981 A G06F-011/34 
SE 470031 B G06F-011/34 

FI 9305637 A G06F-000/00 
EP 591345 Al E 19 G06F-011/34 

Designated States (Regional): BE 
M' 650943.1 W 1 G06F-013/00 

,M ; M)86S4 B G06F-011/34 

r.; ' .-il "5 40 Bl E 12 G06F-011/34 



; SE 911942 A 19910620 

JP 63059638; JP 63189949; US 3575589; 



Filing Notes 
CA FI JP NO US 

BE CH DE DK ES FR GB GR IT LU MC NL SE 



Based on patent WO 9300632 



Based on patent WO 9300632 
DE ES FR GB 
Based on patent WO 9300632 
Previous Publ . patent AU 9221981 
Based on patent WO 9300632 
Based on patent WO 9300632 



Designated States 



DE 69210399 

ES 2039539 
*]••; 562.1.663 

PI 104 018 



T3 
A 

Bl 



(Regional): BE DE ES FR GB 

G06F-011/34 Based on patent EP 591345 
Based on patent WO 9300632 
Based on patent EP 591345 
Cont of application WO 92SE456 
Cont of application US 94170193 
G06F-011/34 Previous Publ . patent FI 9305637 



G06F-011/34 
G06F-011/30 



Abstract (Basic): WO 9300632 A 

The system includes at least one event report generator (9) in 
each program (4) which is executable in the computer system and whose 
execution should be monitored, and an event processing machine (15) 
for processing the events reported by the event report generator in 
a monitored program during execution, depending on a rule base (16) 
which is included in the event processor. 

The system also includes an equipment (18) controlled by the 
event processing machine and adapted to perform an action determined 
by the processing machine, and an interface (13) for transferring 
information about ah event reported by the event report generator 
to the processing machine, and for event related message 
transmission . 

ADVANTAGE - Wider applicability. 
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Abstract (Basic) : WO 9207318 A 

Method involves organising a team of servers into multiple 
management units each of which has one or more group of individual 
servers . One or more tour templates describing a bounded work shift 
are defined and a forecast generated of an expected event load and 
the number of servers required. The expected event load is allocated 
among the management units. 

The tour templates are correlated with the forecast to generate a 
set of tours for each management unit. The individual servers of each 
management unit are assigned to the generated tours for the management 
unit and a schedule for each individual server of the management unit 
is generated. 

USE/ADVANTAGE - E.g. for scheduling staff in telephone call 
centre. Capable of accommodating significant change in environment 
condition, and provides flexibility and control. 
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Abstract (Basic): EP 274406 A 

Each node of the system has a set of resource server modules, each 



controlling one or more particular resources of the same class. The 
module may be a data manager, human interface manager, network 
interface module, port manager, message server, debugging device, 
console manager, event manager or command line interpreter. Each 
module is configured in run time in accordance with information 
provided in a resource definition message. During the configuration of, 
for example, a first node (171), a configuration management process 
i'".MP) reads a node definition message (NDM) for the node and all 
.-"I ovarii: resource template messages (RTM) and generates, from them, the 
: --source definition messages for that mode. 

ADVANTAGE - Allows resources at any node to be configured quickly 
and efficiently. 
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ABSTRACT 

BE SOLVED: To manage distribution based on the community 
of a remote system user by distributing protected software 
from center service facilities 22 to the remote system 12. 



SOLUTION: According to a tra 
a specific identified use 
application from a specif 
programmed that a remote 
software application throu 
center policy server 11 
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112 built on the Web servers 
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ic remote site. Many Web servers 110 are so 

system user can selectively access resident 
gh a network 80. The access is managed by a 
4 according to user information and system 
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ABSTRACT 

PROBLEM TO BE SOLVED: To transfer communication by a connectionless 
protocol with less management load through the use of connection whose 
communication quality is guaranteed by providing a connection management 
server and setting connection in accordance with prescribed information. 

SOLUTION: The connection management server 150 which intensively manages a 
connection setting state and plural edge nodes are connected to a 



backbone network formed by an exchange device having the communication 
quality guaranteeing function of traffic so as to constitute a network 
system. When a connection setting request is given, the management server 
150 refers to an operation policy data base 310. When it is approved, the 
attribute of setting connection is decided, a connection database 360 is 
updated and the protocol is transmitted to the corresponding exchange 
device and the node. When a route control protocol processing part 370 
receives a route control protocol from a router, it calculates a route, 
updates a route table 330 and transmits a routing protocol to the other 
rou t er . 
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ABSTRACT 

PURPOSE: To attain the coincidence between the user's will for use of a 
computer and the control state of the computer operation by registering 
user information, deciding an operating control policy based on the 
result registering in order to operate the computer, and updating the 
registration of the user. 

CONSTITUTION: Each user registers the schedule of his/her use of a computer 
in an operation control system, and a group of computers connected to 
each other via each user or computer network refers to the information on 
an operation system. Then the operation control system decides an operation 
control policy 2 based on the information on the operation system. The 
operation system offers the information to the users and the computers and 
reflects these information in order to perform an operation 3 based on the 
decided policy . In such a case, the user registration 1 is deleted when 
the user uses a computer or the registered time passed. Thus the 
registration 1 is updated by the user's will. In such a way, the 
coincidence is secured between the user's will for use of the computer and 
the control state of the computer operation. 
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Abstract (Basic) : US 20030188208 Al 

NOVELTY - A server module (SM) (54) with processor and activity 
monitor operates at three mode with different maximum performance level 
and power consumption rate. A management module (MM) (55) analyzes the 
received activity of SM, to determine operating mode using 
predetermined policies . The MM generates command to direct SM to 
operate in determined operating mode. 

DETAILED DESCRIPTION - An INDEPENDENT CLAIM is also included for 
server operation method. 

USE - For power and workload management of personal computer (PC), 
personal digital assistant (PDA), information appliances, data 
processing system and electronic system and devices of building using 
Internet. 

ADVANTAGE - Provides large capacity and multiple network nodes 
or servers in small physical footprint with conservative power 
relative to server performance. Also, maintains performance and reduces 
power consumption. Extends the lifetime of computer system component 
and server, hence the total cost of ownership is reduced. 

DESCRIPTION OF DRAWING (S) - The figure shows a schematic view of 
the multi-server computer system. 

server module (54) 

management module (55) 

router (62) 

Internet (63) 

client systems (70) 
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Abstract (Basic) : US 6209101 Bl 

NOVELTY - The security system has an enforcement mechanism (20), 
communicatively coupled to several security servers 

(250, 250A, 250B, 250D, 250R) to enforce a request to access one of the 
resources (25) by querying one of the security servers. 
DETAILED DESCRIPTION - The security servers 

(250, 250A, 250B, 250D, 250R) . Each server includes a set of security 
associations. An enforcement mechanism (20) includes an operating 
system kernel (210) having a task control block (230), for each of a 
number of tasks (40) executed in the computing environment. The 
mechanism queries a primary security server identified in the task 
control block of the corresponding task. Each primary security server 
is a task executing within the computing environment. The task control 
block of each primary server identifies a parent security server for 
resolving resource requests that the primary security server is unable 
to resolve. INDEPENDENT CLAIMS are also included for the following: 

(a) Method for controlling access to number of resources in 
computing environment; 

(b) Computer readable medium 

USE - Used in secure computing environment in order to control the 
management, protection and sensitive information. 

ADVANTAGE - Dynamically creates and terminates security policies 
to adapt to organizational policy changes. Each security server is 
tailored to implement unique security policies . Allows greater 
flexibility in controlling user's and processes. Each security server 
incorporates highly specialized policies and is implemented in 
efficient, light-weight manner that is relatively easy to develop and 
administer . 

DESCRIPTION OF DRAWING (S) - The figure illustrates the security 
system in which the policy resolution mechanism has a hierarchy of 
security servers. 

Enforcement mechanism (20) 

Task (40) 

Operating system kernel (210) 
Task control block (230) 

Security servers ( 2 50 , 250A, 250B, 250D, 250R) 
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NOVELTY - Game system is composed of multiple game terminals , 
which are connected to each other via communication medium for players 
to see output information and to input instructions. Each game terminal 
consists of game program medium, dta RAM, communication interface, 
input device, display and CPU. The program codes executed by CPU 
include communication, display, operating and data processing modules. 
The player can issue instructions to itself game terminal. 

USE - A policy -simulative game system. 

Dwg. 0 
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Abstract (Basic) : US 6006194 A 

NOVELTY - Computer software identifies several client computers 
. Several tokens are issued to each client computer. The software 



transfers control of tokens from a served computer to a serving 
computer for performing services. The client computers bid their tokens 
for possible preferences of an auction to establish a winning. All 
tokens bid in the auction are recycled to the respective client 
computers . 

USE - For digital processing system. 

ADVANTAGE - After the bidding term, the tokens are recycled back to 
the respective client computers, so the client computers are always 
assured of not permanently losing their franchises that are associated 
with their respective commissions. 

DESCRIPTION OF DRAWING (S) - The figure shows the flowchart for 
allocating services and resources. 
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Abstract (Basic): WO 9946906 Al 

NOVELTY - The computer network includes one or more service 
computers that provide multiple network services via the network. One 
or more connection devices allow multiple network client computers 
to access the services via the network. A single routing computer 
serves as a firewall through which all traffic between the network 
services and the network client computers must pass. 

DETAILED DESCRIPTION - An INDEPENDENT CLAIM is also given for a 
method for providing a network services via a computer network to 



multiple network client computers . 

USE - For connecting a local area network (LAN) to the Internet 

ADVANTAGE - Prevents infiltration of the LAN by other users of the 
Internet, allows single security policy for the computer network to 
be distributed across multiple firewalls and can be remotely managed 
from anywhere in the network. 

DESCRIPTION OF DRAWING (S) - The drawing shows a block diagram of 
the network over which a network service provider delivers services 
securely to multiple customers. 
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Abstract (Basic) : US 5870561 A 

NOVELTY - The server forms a policy (300) comprising a name 
portion (302), selection criteria (304) and provider portion (306) and 
forms a recommendation as to whether the client can generate proposed 
traffic. The recommendation is transmitted to the client after storing 
in a cache memory. 

DETAILED DESCRIPTION - The server has an application programming 
interface (210) using which clients make requests for generating 
network traffic. Each request comprises the type of traffic to be 
generated and destination mode address. The server contacts network 
software (202) to obtain cost estimates and link characteristics for 
generating the traffic and route for passing the traffic. An 
INDEPENDENT CLAIM is also included for a method of controlling network 
traffic . 

USE - For wide area computer networks (WAN) . 

ADVANTAGE - Network administrator can view policies of remote 
modes. Only one laser interface is needed to manage network traffic 
generated by many clients . 

DESCRIPTION OF DRAWING (S) - The figure shows block diagram of node 
of computer network and policy implemented by the network. 

Network software (202) 

Application programming interface (210) 
Policy (300) 

Name portion (302) 

Selection criterion (304) 

Provider portion (306) 
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The system has a directory service unit (106) which manages access 
lo several computers that are connected through a communication 
network, in a hierarchical manner based on logical dependence 
relationship or inclusion relationship. A policy domain registration 
unit (102) registers the use range of an inspection policy in the 
directory service unit. 

An inspection policy registration unit (103) registers an 
inspection policy into the directory service unit. An inspection 
policy execution unit (104) executes the registered inspection policy 

using a security inspection unit (107). An inspection policy 
verification unit (105) performs co-ordination check of an inspection 
policy based on the inspection result from the security inspection 
unit . 

ADVANTAGE - Enables inheritance of monitoring policy between 
policy domain. Reduces labour for setting up monitoring policies . 
Secures co-ordination of monitoring policy . 
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Abstract (Basic): WO 9809402 A 

The method involves receiving data relating to a policy group 
definition of at least one policy group. A program is generated 
representative of the policy group definition data. The generated 
program is sent to each of several computer workstations . The 
workstations are instructed to check, by employing the program, 
whether or not each respective workstation belongs or does not belong 
to the at least one policy groups. The results of the checking step 
from each work station are returned to at least one managing station. 

The policy group definition data is received at a remote 
location. The generated program is generated at a remote location. The 
checking step is performed regardless of whether the workstation is 
connected to a network or not. The generated program is altered in 
response to the returned results. 

ADVANTAGE - Enables taking decisions for group membership by each 
workstation itself and independently of any others. Allows computer 
groupings to be defined and monitored on continuous basis, with actual 
groupings specified to reflect operational and organisation nature of 
each company. 
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ABSTRACT EP 1107516 Al 

The invention is related to a digital, wired or wireless, communication 
system constituting a network of multiple nodes. The network comprises a 
central node. The central node controls all the communication in the 
network. In such a system, information related to the system itself or to 
the nodes in the system can be distributed by the central node among the 
peripheral nodes in the network or kept in a database in the central 
node, which database is accessible on request from the peripheral nodes 
in the network. The information can be conveyed to the central node from 
the peripheral nodes, either commanded by the central node itself or on 
request from a peripheral node, triggered by an internal event in the 
peripheral node, e.g. a change of state having external consequences. 

The invention provides a mechanism for efficient distribution of 
relevant information in such a system. 
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..SPECIFICATION network technologies, both wired and wireless. 

Thus a target system is considered which is a digital, wired or 
wireless, communication system constituting a network of multiple 
nodes . The network comprises a central node, also called master and two 
or more peripheral nodes, also called slaves or slave units. The central 
node controls . . . 



forwarding nodes 
Notifications when nodes join or leave the network 
Notifications when a connection to a fixed infrastructure becomes 



available or ceases to be available 

* Notifications of other events 

* Information related to forwarding policy 

Furthermore, it should be noted that the methods to be used in a 
Bluetooth system are not limited to the type of information mentioned in 
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Fulltext Availability: 
Detailed Description 

Detailed Description 

. . . a user attempts to access a resource to which he previously had 

access, the system may provide such access to the resource, and possibly, 
additionally, notify the security administrator o@ the event . While 
providing some temporary relief, however, conventional systems still do 
not satisfactorily address the issue of the actual creation of the table 
and contending with the dynamic nature of the changes occurring within 
the organization requiring continuous manual updates to the security 
policy . 

[010] Prior art solutions, for example, Moriconi et al . U.S. patent 
6,158,010, may also suggest certain ways to distribute security policies 
. in Moriconi et al . , the inventors disclose a system where a global 
r---.-ur.iuy policy is distributed to various computers on the network 

i or rn the local security policies . Orchier et al. in U.S. patent 
-,,;70,24 4, suggest a system and method for ensuring compliance of 
separate computers within a computer network to a centralized security 
policy . The advantage of this system is its ability to enforce a 
centrally defined security policy , on local security policies and 
methods developed in local systems. More specifically, it enforces the 
general security 
4 

policies put in place over local procedures. In some cases it may be 
advantageous to authenticate a security policy through a digital 
signature as is suggested in U.S. patent 6,202,157, to Brownlie et al . 

[011] However, none of the systems mentioned... 
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English Abstract 

A service discovery mechanism may allow clients in a distributed 
computing environment to search for services. The service discovery 
mechanism may allow a client to request a capability credential from a 
service. In one embodiment, the client may present to the service a set 
of desired capabilities. The service may then respond with a capability 
credential that may convey to the client the rights to use the requested 
capabilities. A complete service advertisement may be needed to create a 
message endpoint for accessing the service. In an embodiment, the 
capability credential may be used by a client to obtain a complete 
advertisement for the requested capabilities. The capability credential 
may provide an additional level of security for the service provider. The 
capability credential that may be used to receive the complete 
advertisement may also be used to construct a message gate to communicate 
with the service where the gate embeds the capability credential in each 
message to the service. 

French Abstract 

L' invention se rapporte a un mecanisme de recherche de services qui peut 
permettre a des clients dans un environnement informatique reparti de 
rechercher des services. Ce mecanisme de recherche de services peut 
permettre a un client de demander un titre accreditif relatif a la 
capacite d'un service. Dans une realisation, le client peut presenter au 
service un ensemble de capacites souhaitees. Le service peut alors 
repondre avec un titre accreditif de capacite qui peut transmettre au 
client les droits d ' ut il isa t ion des capacites demandees . Une publicite 
complete relative au service peut etre necessaire pour creer un point 
terminal de message permettant d'acceder au service. Dans une 
realisation, le titre accreditif relatif a la capacite peut etre utilise 
par un client pour obtenir une publicite complete pour les capacites 
demandees. Le titre accreditif de capacite peut fournir un niveau de 
securite supplementaire pour le fournisseur de services. Ce titre peut 
egalement etre utilise pour recevoir la publicite complete et pour 
construire une porte de messages permettant la communication avec le 
service, ladite porte incorporant ledit titre accreditif de capacite dans 
chaque message a destination du service. 
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. . . 0 to the service and may register the advertisement in a space in the 
distributed computing environment. In one embodiment, an agent may 
register for event notification in the Jini Lookup service, and thus 
may be informed when, a new Jini service is registered. When, informed of 
a new Jini service, the for the new services. In one embodiment, when a 
Jini service is removed, the agent may receive an 5 event notifying 
of the removal of the Jini service. The agent may then remove the XMI, 
advertisement for the service from the space. In one embodiment, to... 

...other kind of organization. An enterprise may utilize an enterprise 
computing environment for conducting a portion of its business. The 
enterprise computing environment may include various enterprise 
services. Clients in the distributed computing enviromnent may desire 



no use services in the enterprise computing en virormient . An enterprise 
service may be based on a number of... the of fly service (the enterprise 
service is hidden to the client), so the client does not have to support 
the architecture of the enterprise service. Multiple distributed 
network environment clients may use the same bridge service {each using 
a 1 0 unique gate pair) to interact with the enterprise service. The 
bridge service or other. . . 
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English Abstract 

A decision support system called Mounties that is designed for managing 
applications and resources using rule-based constraints in scalable 
mission-critical clustering environments. Mounties consists of four 
active service components: (1) a repository of resource proxy objects for 
modeling and manipulating the cluster configuration; (2) an event 
notification mechanism for monitoring and controlling interdependent and 
distributed resources; (3) a rule evaluation and decision processing 



mechanism; and (4) a global optimization service for providing decision 
making capabilities. The focus of this paper is on the design of the 
first three services that together connect and coordinate the distributed 
resources with the decision making component. 

French Abstract 

L ' invention concerne un systeme d'aide a la decision appele Mounties, qui 
a ete concu pour la gestion des applications et des ressources utilisant 
des contraintes basees sur des regies dans des environnements de 
regroupement cibles extensibles. Mounties comprend quatre composants de 
service actifs : (1) un depot d'objets proxy ressources servant a 
modeliser et a manipuler la configuration du regroupement ; (2) un 
niecanisme de notification d 'evenements servant a surveiller et a 
commander les ressources int erdependantes et distribuees ; (3) un 
mecanisme d' evaluation des regies et de traitement des decisions ; et (4) 
un service d ' optimisa t ion globale destine a fournir des fonctions de 
prise de decision. L ' invention porte essentiellement sur la conception 
des trois premiers services qui, ensemble, coordonnent les ressources 
distribuees et les relient au composant prise de decision. 
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Claim 

. . . configuration and the dependency information for each resource at 
cluster startup or whenever a new resource or application is introduced 
in the cluster. A continuous event notification and heartbeat 
mechanisms are also needed for monitoring cluster-wide activities. Using 
these mechanisms, Mounties continuously monitors the cluster-wide events 
and compares the current... 

. . .the resources to bring about the desired changes. These principles are 
.illustrated in the following simple, but realistic example. 
An Example 

This exarriple involves a cluster of three nodes shown in Figure 1. 
Both Node,0 and Node- I have disk adapters that connect them to a shared 
disk which holds a database. Each... 
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English Abstract 

Method and apparatus for service level management, wherein business 
processes are composed of services. A state of the service is defined by 
one or more service parameters, and the service parameters depend upon 
performance of network components that support the service, e.g., 
component parameters. The state of the service may depend, for example, 

a collection of service parameter values for availability, 
:. el iabi I i t y , security, integrity and response time. A service level 
agreement: is a contract between a supplier and a customer that identifies 
services supported by a network, service parameters for the services, and 
service levels (e.g., acceptable levels) for each service parameter. 

French Abstract 

L' invention concerne un procede et un appareil de gestion de niveau de 
service ; les processus operat ionnels consistant en des services. Un etat 
du service est defini par un ou plusieurs parametres de service. Les 
parametres de service dependent des performances des composants du reseau 
acceptant ledit service, par exemple les parametres du composant . L'etat 
du service peut dependre, par exemple, d 1 un ensemble de valeurs de 
parametres de service en termes de disponibilite , de fiabilite, de 
securite, d'integrite et de temps de reponse. Un agrement de niveau de 
service est passe entre un fournisseur et un client, lequel agrement 
identifie les services acceptes par un reseau, les parametres de services 
destines aux services, et les niveaux de service (par exemple, les 
niveaux acceptables) pour chaque parametre de service. 
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English Abstract 

A method of managing storage of data includes assigning one of a 
plurality of buffer pointers to a first frame of data and storing the 
first frame of data in a location in memory associated with the assigned 
buffer pointer. The method also includes determining whether the first 
frame of data is associated with a sequence of frames and storing the 
assigned buffer pointer in a first location if the first frame of data is 



associated with a sequence of frames and a different location if the 
first frame of data is not associated with a sequence of frames. The 
method also includes, after storing the assigned buffer pointer, 
manipulating the first frame of data stored in the location in memory. 
The manipulation includes accessing the assigned buffer pointer. 

French Abstract 

L ' invention concerne un procede permettant de gerer le stockage de 
donnees, qui consiste a attribuer un ou plusieurs pointeurs tampons a une 
premiere urarne de donnees et a stocker ladite trame dans un emplacement 
de la memoire associe au pointeur tampon attribue. Le procede consiste 
egaiement a determiner si la premiere trame de donnees est associee a une 
sequence de trames et a stocker le pointeur tampon dans un premier 
emplacement, dans le cas ou la premiere trame de donnees n'est pas 
associee a une sequence de trames. Le procede consiste en outre, apres le 
stockage du pointeur tampon attribue, a traiter la premiere trame de 
donnees stockee dans 1 1 emplacement de la memoire. Le traitement comprend 
I'acces au pointeur tampon attribue. 

Fulltext Availability: 
Detailed Description 

Detailed Description 

. . . until the last of the frame is 

received and cyclic redundancy check 36 verified, the 
extracted data is not considered complete and valid until 
chat event occurs. This indication of frame validity is 
communicated to the input/output unit 24 for all extracted 
data. Input/output unit 24 is responsible for invalidating 
any extracted data that has been extracted from an errant 
sequence per the applicable error policy for the node. 

Normally data has already been extracted and may be queued 
for transmission to the terminal 18. If queued, then the 
sequence may be deleted. If transmission has already in 
progress, then the current frame can be invalidated and the 
sequence aborted, according to what error policy is in 
effect. Some error policies in FC-PH allow for partial 
sequence delivery. 

Thusf extraction/insertion unit 78 allows selective 
access to particular frames 22 based on frame type. 

Therefore, data may be extracted from or written to 
selected portions of a frame that is transmitted 

isochronously between a plurality of nodes , including nodes 
that do not have read or write access to relevant slots 40 
of frames 22. This enables isochronous transfer of 
information between nodes 12 in... 
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English Abstract 

A communication system includes a plurality of network nodes including a 
first node having an interface unit. The interface unit includes a 
scheduler operable to schedule periodic transmission of a plurality of 
frames at respective designated times. Each of the plurality of frames 
includes a plurality of slots. The interface unit also includes an access 
system operable to designate which of the plurality of slots of a frame 
are accessible by each of the plurality of nodes and to access the 
designated slots. 

French Abstract 

L 1 invention concerne un systeme de communications qui comprend plusieurs 
noeuds de reseau, un premier noeud comportant une unite interface pourvue 
d'un programmateur permettant la programmation d' emission periodique de 
plusieurs trames a des temps donnes. Chaque trame comprend plusieurs 
tranches de temps, ladite unite interface presentant egalement un systeme 
d'acces concu a la fois pour designer celles des tranches de temps d'une 
trame qui seront accessibles pour chaque noeud et pour acceder aux 
tranches de temps designees. 

Fulltext Availability: 
Detailed Description 

Detailed Description 

. . . until the last of the frame is 

received and cyclic redundancy check 36 verified, the 
extracted data is not considered complete and valid until 
that event occurs. This indication of frame validity is 
communicated to the input/output unit 24 for all extracted 
'iara. Input/output unit 24 is responsible for invalidating 
r:i!y extracted data that has been extracted from an errant 
sequence per the applicable error policy for the node. 

Normally data has already been extracted and may be queued 
for transmission to the terminal 18. If queued, then the 
sequence may be deleted. If transmission has already in 
progress, then the current frame can be invalidated and the 
sequence aborted, , according to what error policy is in 
effect. Some error policies in FC-PH allow for partial 
sequence delivery. 

Thus, , extraction/insertion unit 78 allows selective 
access to particular frames 22 based on frame type. 

Therefore, data may be extracted from or written to 
selected portions of a frame that is transmitted 

isochronously between a plurality of nodes , including nodes 
that do not have read or write access to relevant slots 40 
of frames 22. This enables isochronous transfer of 
information between nodes 12 in... 
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...SPECIFICATION the Invention 

The present invention relates to alarm notification in a communications 
network and more specifically to a method and apparatus for receiving 
alarms from multiple network management servers , applying policies 
to those alarms and forwarding the alarms that conform to the policies 
to one or more network management applications, such as a telephonic 
alarm notification method and apparatus. 

Background of the Invention 

Spectrum (TM) is a model-based network management system, sold by 
Cabletron Systems, Inc., Rochester, New Hampshire, for... the SGs . 

Summary of the Invention 

The present invention is directed to an apparatus and method of alarm 
notification which includes: a) receiving alarms from multiple network 
management servers ; b) assigning policy -based filters to associated 
network management applications; and c) applying the assigned policy 
-based filters to the alarms and for the alarms that pass the filters, 
generating an alarm notification forwarding the same to the associated 
network management applications. 

In an embodiment described herein, a user designates a plurality of 
such filters, which constitute an... 



GUI) window display for a new SpectroPHONE ( TM) application. 



Detailed Description 

The present invention is directed to an alarm notification manager 
which receives alarms from multiple network management servers , 
allows an unlimited number of filters to be defined within one policy , 
allows policies to be named and stored in a database, allows policies 
to be scheduled for different times, and allows the same policy to be 
applied to one or more network management applications. 

As illustrated in Fig. 2, a live network 10 is connected by links 11 to 
...capabilities into the telephonic alarm notification method allows for 
sophisticated filtering of the alarms via the policy administrator 170 
and for monitoring of alarms from multiple network segment servers . 

Fig. 17 shows a typical system architecture for the new 
SpectroPHONE (TM) application, which is an example embodiment of the 
telephonic alarm notification method and. . . 

...CLAIMS 24), the policy comprising a plurality of filters and each filter 
including at least one filter parameter; 

the alarm monitor receiving the alarms from the plurality of servers 
and applying the policy to the alarms to determine a critical alarm 
which passes at least one filter, and the alarm monitor sending to 
the at least one associated application (24) an alarm notification 
identifying the critical alarm and the at least one filter passed by 
the critical alarm. 
2. The method of claim 1, including: 

the associated applications... 



16/5, K/9 (Item 9 from file: 348) 

DIALOG ( R ) File 34 8: EUROPEAN PATENTS 

[c) 2004 European Patent Office. All rts. reserv. 

' . O 'i ' 7 '37 

A predictive access-controll and routing system for integrated services 

telecommunication networks 
Pradiktives Zugrif f ssteuerungs- und Lei tweglenkungs system fur Dienste 

integrierende Telekommunikationssnetzwerke 
Systeme de commande d'acces predictive et systeme de routage pour reseaux 

de telecommunication a services integres 
PATENT ASSIGNEE: 

GTE LABORATORIES INCORPORATED, (274323), 1209 Orange Street, Wilmington 
Delaware 01901, (US), (applicant designated states: 
BE; DE; FR; GB; IT;NL;SE) 
INVENTOR: 

Kheradpir, Shaygan, 131 Coolidge Avenue Apt. 122, Watertown, MA 02172, 

(US) 

LEGAL REPRESENTATIVE: 

Grunecker, Kinkeldey, Stockmair & Schwanhausser Anwaltssozietat (100721) 
, Maximilianstrasse 58, 80538 Munchen, (DE) 
PATENT (CC, No, Kind, Date) : EP 386607 A2 900912 (Basic) 

EP 386607 A3 920902 
EP 386607 Bl 970205 
APPLICATION (CC, No, Date): EP 90103904 900228; 
PRIORITY (CC, No, Date): US 321710 890310 
DESIGNATED STATES: BE; DE; FR; GB; IT; NL; SE 

INTERNATIONAL PATENT CLASS: H04Q-003/66; H04Q-003/00; H04M-003/36; 
!!04M-ni 1 /00; 

! TED PATENTS (EP A): US 4 669113 A; US 4284852 A; EP 258654 A; US 3536842 A 
; Wt > h / 037 63 A 
"iTED REFERENCES (EP A) : 

PROCEEDINGS OF NETWORK MANAGEMENT AND CONTROL WORKSHOP September 1989, 

TARRYTOWN (US) pages 389 - 413; KHERAPIDIR: 'PARS: A predictive 

access-control and routing strategy for real-time control of 

telecommunication networks' 
ITC-10 ; SESSION 3.2, PAPER 3 June 1983, MONTREAL (CA) pages 1 - 8; 

CAMERON ET AL : 'Dynamic routing for intercity telephone networks* 
ITC-10 ; SESSION 3.2, PAPER 7 June 1983, MONTREAL (CA) pages 1 - 6; 

KARSTAD ET AL : 'Centralized routing based on forecasts of the telephone 

traffic ' ; 



ABSTRACT EP 386607 A2 

A predictive access-control and routing system for a telecommunications 
network operating in uncertain environments and capable of handling 
heterogeneous traffic. The system is a real-time, state-dependent network 
traffic control system in which the control strategy is a function of 
both real-time congestion levels and real-time traffic profiles. At 
specific time epochs, the system, using real-time measurements of 
source-destination arrival rates (110) and trunk group link occupancies 
(112), generates predictions of all network trunk group occupancy levels 
for the next epoch (114) as a function of routing and access control. It 
then minimizes a projected cost function, such as blocking (122, 124), to 
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...CLAIMS a percentage of predicted incoming traffic to each of said 
specified routes; 

means to optimize said traffic control variables to minimize 
blocked traffic in the event of predicted overloads, thereby 
effecting an access and control policy for said network; and 

means to implement said access and control policy . 

11. The system of claim 10 wherein said time intervals are a function 
of the average holding time of traffic on said network. 

12 . The. . . 
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Detailed Description 

Claims 

Fulltext Word Count: 7107 
E ng 1 i s h Abs t r a c t 

In clusters of multiprocessor systems it is important that these 
processor nodes are aware of each others availability and performance 
capabilities. In highly available systems using these multiprocessor 
systems there needs to be a method to dynamically bring nodes both into 
the cluster and to remove nodes out of the cluster. The processor node 
that is responsible for these actions is designated the manager node 
(50) . The manager node has a pre-selected backup to assume this 
responsibility upon the inability of said manager node to fulfill its 
duties. To allow the cluster of nodes to communicate with each other 
efficiently there needs to be a distributed messaging system that allows 
for the rapid distribution of data messages among the cluster nodes. 

French Abstract 

Dans des grappes de systemes multiprocesseur , il est necessaire que des 
noeuds de processeurs soient informes de la disponibilite et des 
performances des autres noeuds. Un procede permettant a la fois d'ajouter 
des noeuds dans une grappe ou d'en supprimer dynamiquement est necessaire 
dans des systemes hautement disponibles utilisant des systemes 
multiprocesseur. Le noeud de processeur sensible a ces actions est appele 
noeud de gestion (50), et possede une copie de secours preselectionnee 
lui permettant d'assumer ses responsabilites lorsque le noeud de gestion 
ne peut pas jouer son role. Pour que les noeuds de la grappe communiquent 
efficacement entre eux, un systeme de messagerie distribue permettant une 
distribution rapide des messages de donnees entres lesdits noeuds est 
necessaire . 

Legal Status (Type, Date, Text) 

Publication 20020314 Al With international search report. 

Fulltext Availability: 
Detailed Description 

Detailed Description 

. . . cluster manager detects heartbeats are not being responded to by the 
original cluster 1 5 manager and then initiates itself as cluster 
manager. The backup cluster manager notifies the clients that it is 
becoming the cluster manager and then notifies other services that were 
running on the cluster manager to switch to the backup services that are 
running on the backup cluster manager. Since the backup cluster manager 
has open connections and heartbeats to all clients the transition is 
rapid. Upon completing this transition the new cluster manager informs 
'j i ! the clients of its new status and a new backup cluster manager is 
s^:.:ec ted on the basis of policy information or other criteria. 

The backup cluster manager is shut down for system maintenance. The 
cluster manager detects failed heartbeats and initiates the selection of 
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Detailed Description 

Claims 
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English Abstract 

The present invention describes a method and system for managing 
high-availability-aware components in a networked computer system. In 
particular, the method includes registering components and dynamically 
allocating roles and assignments to one or more of the registered 
components to achieve a desired level of redundancy based on component 
type information. The method may include an additional step of performing 
atiminist rat i ve actions on the registered components in response to a 
request: from an external management agent in order to increase the 
availability of services provided by the high-availability-aware 
components. Further, the method may additionally include responding to an 
error by changing roles and assignments of one or more of the registered 
components, providing information to registered components so that 
related components may communicate to achieve a desired redundancy level, 
and/or maintaining additional information relevant to managing 
high-availability-aware components. Such additional information may 
include information regarding software release domains, component 
relationships, and/or protection groups. 

French Abstract 

La presente invention concerne un procede et un systeme de gestion de 
composants a haute disponibil ite dans un systeme informatique sur reseau. 



En particulier, ce procede consiste a enregistrer des composants et a 
attribuer de maniere dynamique des roles et des affectations a un ou 
plusieurs composants enregistres pour atteindre le niveau vise de 
redondance, sur la base des informations sur le type de composant. Ce 
procede peut comprendre une operation supplementaire qui consiste a 
realiser des actions administrat ives sur les composants enregistres en 
reponse a une demande emanant d'un agent de gestion externe afin 
d'augmenter la disponibilite des services fournis par les composants a 
haute disponibilite. Ce procede peut egalement consister a repondre a une 
erreur en changeant les roles et les affectations d'un ou de plusieurs 
composants enregistres, a fournir des informations aux composants 
enregistres de sorte que les composants connexes puissent communiquer et 
atteindre ainsi le niveau de redondance vise, et/ou a mettre a jour des 
informations supplementaires utiles pour la gestion des composants a 
haute disponibilite. Ces informations supplementaires peuvent contenir 
des informations relatives aux domaines de 1 ' edition de logiciels, 
relations entre composants, et/ou groupes de protection. 
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Fulltext Availability: 
Claims 

Claim 

. . . possible errors and recommend recovery actions received from an 

external source. The CRIM may also be programmed to consider the current 
cluster configuration and recovery policies in devising recovery 
procedures. >j 5 One example of recovery procedures involves switching a 
secondary component to a primary role in order to replace a... types have 
frequent communication or coordination patterns. The elose 

irroer-a ssignment interaction may make it impossible or inefficient to run 
components implementing these assignments in different nodes for many 
reasons, including a potential overhead of a cluster-wide communication. 
Thus, it may be Id 5 desirable to co-locate such assignments by. . . 
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Detailed Description 

Claims 
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English Abstract 

A scalable access filter that is used together with others like it in a 
virtual private network to control access by users at clients in the 
network to information resources provided by servers in the network. Each 
access filter use a local copy of an access control data base (3845) to 
determine whether an access request is made by a user. Each user belongs 
to one or more user groups and each information ressource belongs to one 
or more information sets. Access is permitted or denied according to 
access policies which define access in terms of the user groups and 
information sets. The first access filter in the path performs the access 
check, encrypts and authenticates the request; the Qther access filters 
in the path do not repeat the access check. The interface used by 
applications to determine whether a user has access to an entity is now 
an SQL query. The policy server (3811) assembles the information needed 
for the response to the query from various information sources, including 
source external to the policy server. 

French Abstract 

L* invention concerne un filtre d'acces scalaire utilise avec d'autres 

; i us similaires dans un reseau prive virtuel afin de controler l'acces 

- ;i i.lisa teurs a des clients du reseau pour obtenir des ressources 
c: ' i n i:orrna tzions fournies par des serveurs sur le reseau. Chaque filtre 
ti'ccces utilise une copie locale d'une base de donnees de controle 
d'acces (3845) pour determiner si la demande d'acces est effectuee par un 
utilisateur. Chaque utilisateur appartient a au moins un groupe 
d ' u t ilisateurs et chaque ressource d ' inf ormat ions appartient a au moins 
un ensemble d ' inf ormat ions . L'acces est autorise ou refuse en fonction 
des politiques d'acces qui definissent l'acces en terme des groupes 
d * ut ilisateurs et des ensembles d ' inf ormations . Le premier filtre d'acces 
dans la voie effectue la verification d'acces, decrypte, et authentifie 
la demande, les autres filtres d'acces dans la voie ne repetent pas la 
verification d'acces. L'interface utilisee par les applications pour 
determiner si un utilisateur a acces a une entite est alors une demande 
SQL . Le serveur de regies (3811) assemble les informations requises pour 
la reponse a la demande emanant de plusieurs sources d 1 inf ormations , y 
compris une source externe audit serveur. 
Legal Status (Type, Date, Text) 

Publication 20001228 Al With international search report. 

Examination 20010802 Request for preliminary examination prior to end of 

19th month from priority date 

Fulltext Availability: 
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1% Query against the current page 
Function ConclavePolicyAllowedo 
dsn = "ConclavePolicyServer " 4003 
dbuser = "anyone" 
dbpass = "anything" 
'default to not allowed 
ConclavePolicyAllowed = v, No" 4005 
•Get . . . 
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Claims 
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English Abstract 

An automatic network resource administration server permits automatic 
provisioning of network elements based on a user's service request. Rules 
inheritance and just-in-time expansion enables memory requirements in 
network elements to be minimized and enables automatic provisioning and 
administration of huge network. The network resource administration 
server automatically translates user service requests into a form 
understandable by one of the specialist or network equipment. The network 
resource administration contains a core NRAS Manager (170) that includes 
a core director (60) of all services and multiple Zone Service Managers 
(50), with each ZSM controlling a physical piece of the network indicated 
as a particular zone. 

French Abstract 

L 1 invention concerne un serveur d ' administration de ressource de reseau 
qui permet de fournir automat iquement , sur un reseau, des elements en 
fonction d'une demande de service d ' un utilisateur. Grace a 1* heritage de 
regies et a une expansion juste a temps, la capacite de memoire des 
elements du reseau peut etre reduite et un reseau de dimensions 



considerables peut etre approvisionne . Le serveur d ' administration de 
ressource de reseau traduit automat iquement les demandes de service des 
utilisateurs sous une forme comprehensible, soit par un specialiste, soit 
par l'equipement de reseau. Le serveur d ' administration de ressource de 
reseau contient un gestionnaire (170) comportant un directeur central 
(60) de tous les services et plusieurs gest ionnaires de service de zone 
(50) qui commandent chacun une partie physique du reseau, signalee comme 
zone particuliere . 

Legal Status (Type, Date, Text) 

Publication 20000928 Al With international search report. 

Examination 20001207 Request for preliminary examination prior to end of 

19th month from priority date 

Fulltext Availability: 
Claims 

Claim 

additional step of 
removing the rules from a network element when the service has been 
completed. 

59 A method of simplifying rules administration in a policy based 

i.. -j ! work, comprising the steps of 

' i , refining a template rule for at least one level of a rules hierarchy, 

• -v'r. !; j ve! o i: the hierarchy. . . FIR 
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English Abstract 

A method of routing a subscription request defined by an event filter 
(510) . The method includes parsing (610) the event filter (510) into an 
evaluation tree having at least one subexpression, locating the at least 
one subexpression (520) and determining (530) if the at least one 
subexpression includes a node (110) specific field. If the at least one 
subexpression (520) includes a node (110) specific field, the method 
includes creating a list (540) of nodes and event manager (310) contact 
information and transmitting the subscription request to at least one 
event manager (310) located on a node (110) that is included on a list 
(540) of nodes (110) . 

French Abstract 

L' invention concerne un procede d ' acheminement d'une demande 
d'abonnement definie par un filtre (510) d'evenements. Ledit procede 
consiste a decomposer (610) le filtre (510) d'evenements en un arbre 
d' evaluation comportant au moins une sous-expression; a localiser ces 
sous-expressions (520); et a determiner (530) si les sous-expressions 
comportent un champ specifique de noeud (110). Si les sous-expressions 
(520) comportent un champ specifique de noeud (110), le procede consiste 
a creer une liste (540) de noeuds et d 1 informations de contact du 
gestionnaire (310) d'evenements; et a transmettre la demande d'abonnement 
a un gestionnaire (310) d'evenements au moins se trouvant au niveau d'un 
noeud (110) faisant partie de la liste (540) de noeuds (110). 



Fulltext Availability: 
Detailed Description 



Detailed Description 

system receives, for example, event messages from compatible point 
products within the enterprise. As shown in FIG. I, the enterprise I 00 
may include a plurality of nodes 110, 120, 130 which may, for 
example, be connected by a network (not shown) . A node is, for example, a 
physical box such as a... 

. . . invention, a node may be a personal computer having a compatible point 
product installed on it. In an exemplary embodiment of the present 
invention, the event management system 140 manages events on the 
nodes 110, 120, 130 where the events are generated, minimizing the 
movement of data on the network and keeping actions such as evaluation, 
reporting and automated correction of data close to the... 
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English Abstract 

An object system provides composable object execution environment 
extensions with an object model that defines a framework with contexts, 
policies, policy makers and activators that act as object creation-time, 
reference creation-time and call-time event sinks to provide processing 
of effects specific to the environment extensions. At object creation 
time, an object instantiation service of the object system delegates to 
the activators to establish a context in which the object is created. The 
context contains context properties that represent particular of the 
composable environment extensions in which the object is to execute. The 
context properties also can act as policy makers that contribute policies 
to an optimized policy set for references that cross context boundaries. 
The policies in such optimized sets are issued policy events on calls 
across the context boundary to process effects of switching between the 
environment extensions of the two contexts. 

French Abstract 

La presente invention concerne un systeme objet presentant des 
extensions d ' envi ronnement d' execution objet composables avec un modele 
ob'jet definissant une trame au moyen de contextes, de politiques, de 
: h-m: i deu rs , et d ' act i va teur s se comportant comme des collecteurs 

: ' venemen t s d' instant de creation objet, d' instant de creation de 
: -> i rence , et d' instant d'appel, de facon a assurer un traitement 
d'ei. rets specif ique des extensions d ' environnement . A 1* instant de 
creation objet, un service d 1 instanciation objet du systeme objet donne 
des delegations aux activateurs de facon a etablir un contexte dans 
lequel se cree 1' objet. Le contexte presente des proprietes de contexte 
qui representent des par t icula ri tes des extensions d ' environnement 
composables dans lequel doit s'executer l'objet. Les proprietes de 
contextes peuvent egalement se cornporter comme des decideurs fournissant 
des politiques a un ensemble optimise de politiques dans le cas de 
reference depassant les limites du contexte. Les politiques de tels 
ensembles optimises sont des evenements politiques produits se rapportant 
a des appels depassant les limites de contexte, de facon a traiter des 
effets de commutation entre les extensions d ' environnement de deux 



contextes . 
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Detailed Description 

. . . the virtual address spaces of different processes or computers) . 
Instead, the wrapper 184 simply performs processing for the context 
switch, such as by issuing context events to the policies 180. In the 
case where the client and server component application objects 190, 192 
are in different apartments or processes (i.e., a cross-apartment... 
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nq.lish Abstract 

In accordance with the presen 
(80) is provided that manages 
an Intranetwor k (44) and an in 
connected to the intranetwork 
users of computers connected t 
information regarding computer 
policies to be applied against 
graphical user interface {GUI 
user information, mapping info 
which stores and organizes the 
information and policies. A fi 
stored in the database (72) in 
the rules to a filter engine ( 
outbound data packets transmit 
internetwork (40) and verifies 
internetwork (40) according to 
(76) . The filter executive (76 
stored in the database (72) to 



t invention, a network management program 
the communication of data packets between 
ternetwork (40) . An operator of a computer 
(44) inputs vital information regarding 
o the intranetwork (44), mapping 
s connected to the intranetwork (44), and 

those users and computers, using a 
70) . The GUI (70) communicates the vital 
rmation and policies to a database (72) 

vital user information, mapping 
Iter executive (76) optimizes the policies 
to a set of rules for each user and passes 
78) . The filter engine (78) filters all 
ted from the intranetwork (44) to the 

all inbound data packets from the 

the rules provided by the filter executive 
) also communicates the mapping information 

a naming service manager (74) which 



further updates the mapping information and returns the updated mapping 
information to the filter executive (76) . Consequently, the filter 
executive (78) filters the data packets according to the most recent 
mapping information. 

French Abstract 

Ce programme de gestion (80) de reseau gere la transmission de paquets 
de donnees entre un intrareseau (44) et un interreseau (40). A 1 ' aide 
d'une interface utilisateur graphique (IUG)(70) un operateur d'un 
ordinateur connecte a 1 ' intrareseau (44) entre des informations vitales 
concernant les utilisateurs d ' ordinateurs connectes a 1 ' intrareseau (44), 
des informations de mappage relatives aux ordinateurs connectes a 
1 1 intrareseau (44) et les mesures appliquees a l'encontre des 
utilisateurs et ordinateurs. L'lUG (70) communique les informations 
vitales concernant les utilisateurs, les informations de mappage et les 
mesures a une base des donnees (72) qui stocke et organise toutes ces 
informations. Un superviseur (76) de filtre optimise les mesures stockees 
dans la base de donnees (72) sous forme d'un ensemble de regies destine a 
chaque utilisateur puis les envoie dans un moteur (78) de filtre. Ce 
dernier (78) filtre tous les paquets de donnees a destination de 
l'exterieur et envoyes de 1 ' intrareseau (44) a 1 ' interreseau (40) et 
verifie tous les paquets de donnees a destination de 1 ' interieur et 
provenant de 1 ' interreseau (40) en fonction des regies etablies par le 
superviseur (76) de filtre. Ce dernier (76) communique egalement les 
informations de mappage stockees dans la base de donnees (72) a un 
gestionnaire (74) de service de denomination qui actualise encore les 
informations de mappage et renvoie ces informations actualisees au 
superviseur (76) de filtre, lequel filtre, en consequence, les paquets de 
donnees sur la base des informations de mappage les plus recentes . 



Fu 1 1 1 ex t Ava i labi 1 i t y : 
Detailed Description 



Detailed Description 
. . . wherein : 

FIGURE 1 (Prior Art) is a block diagram of a representative portion of 
the 

5 Internet; 

FIGURE 2 is a pictorial diagram of a plurality of client computers 
and servers interconnected to form a local area network (LAN) as that 
typically connected to the 
Internet as shown in FIGURE 1; 

FIGURE 3A is a schematic ... regarding the user of each computer connected 
to the LAN shown in FIGURE 2, mapping information regarding each such 
user to each such 

computer, and policy information to be applied against each such user; 
FIGURE 7A through 7C are a flow chart illustrating the logic used by the 
GUI to process the vital, mapping and policy information input via the 
main window 
shown in FIGURE 6; 

FIGURES 8A through 8Q are various other windows produced by the GUI 
for inputting vital, mapping and policy information; 
FIGURES 9A through 9D are block diagrams illustrating a plurality of 
tables stored by a database component of the network management program 
for organizing 

the vital, mapping and policy information provided by the GUI; 
FIGURES 10A and 1013 are a flowchart illustrating the logic used to 
upda te 

protocol policy tables stored in the database; 

FIGURES 1 I A and 1 I B are a flowchart illustrating the logic used to 
update 

file type policy tables in the database; 

FIGURE 12 is a flowchart illustrating the logic used to update site 
policy 

tables in the database; 

FIGURES 13A and 13B are a flowchart illustrating the logic used to update 
quota tables in the database; 

FIGURE 14 is a flowchart illustrating the logic used to build a user 



policy 

table in the database; 

FIGURES 15A through 15C are a flowchart illustrating the logic used by a 
filter executive component of the network management program to process 
and optimize the vital, mapping and policy information stored in the 
database; FIGURE 16 is a flowchart illustrating the logic used by the 
filter executive to 

initialize a filter engine component of. . . 

. FIGURE 17 is a block diagram illustrating a plurality of rule sets 
defined by the filter executive of the network management program based 
on the policy 

information stored in the database; 

FIGURE 18 is a flowchart illustrating the logic used to define a set of 
rules, including corporate rules, global network ... communicated between 
the Internet shown in 

FIGURE 1 and the LAN shown in FIGURE 2; 

FIGURE 27 is a flowchart illustrating the logic used to notify users of 
the computers connected to the LAN shown in FIGURE 2 of actions taken by 

the filter 
^ n c. i n e ; 

FinuRE 28A is a block diagram. . . 
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English Abstract 

Apparatus and method for receiving alarms from multiple network 
management servers {12) and applying a plurality of policy -based 
filters (18) to the alarms. The filters may be named and stored in a 
database (16), and application of the policy -based filters may be 
scheduled for different times. The same policy -based filters may be 
applied to one or more multiple network management applications (24). The 
invention allows greater control over which alarms get reported to 
network management applications and provides a means to ensure 
consistency of reported alarms across multiple network management 
applications. A telephonic alarm notification method and apparatus 
incorporates the policy -based filters and the capability to process 



alarms from multiple network segment servers so that users can be 
accurately notified of critical alarms generated in large and complex 
communications networks, via a public communications system. 

French Abstract 

Cette invention concerne un appareil et un procede qui permettent de 
recevoir des signaux d'alarme provenant de multiples serveurs (12) de 
gestion de reseau, et qui font passer ces signaux d'alarme par plusieurs 
filtres (18) de type policier. Ces filtres peuvent etre nommes et stockes 
dans une banque de donnees (16), tandis que le passage par les filtres de 
type policier peut etre programme pour des moments distincts. Ces memes 
filtres de type policier peuvent servir dans une ou plusieurs 
applications (24) multiples de gestion de reseau. Cette invention permet 
de mieux controler quels sont les signaux d'alarme qui sont envoyes aux 
applications de gestion de reseau, et comprend un systeme permettant de 
s' assurer de la pertinence des signaux d'alarme emis dans differentes 
applications de gestion de reseau. Cette invention concerne egalement un 
procede et un appareil pour signal d'alarme telephonique, lesquels font 
appel auxdits filtres de type policier et permettent de traiter les 
signaux d'alarme provenant de differents serveurs de segments de reseau, 
de sorte que les usagers puissent etre avertis avec precision et par 
1 ' intermediaire d'un systeme de communication public en cas d'alarmes 
critiques dans des reseaux de communication complexes et importants. 

Fulltext Availability: 
Detailed Description 
Claims 

English Abstract 

Apparatus and method for receiving alarms from multiple network 
management servers (12) and applying a plurality of policy -based 
filters (18) to the alarms. The filters may be named and stored in a 
database (16), and application of the policy -based filters may be 
scheduled for different times. The same policy -based filters may be 
applied to one or more multiple network management applications (24). The 
invention allows greater control over which alarms get reported to 
network management applications and provides a means to ensure 
consistency of reported alarms across multiple network management 
applications. A telephonic alarm notification method and apparatus 
incorporates the policy -based filters and the capability to process 
alarms from multiple network segment servers so that users can be 
accurately notified of critical alarms generated in large and complex 
communications networks, via a public communications system. 

Detailed Description 
. . . the Invention 

The present invention relates to alarm notification in a communications 
network and more specifically to a method and apparatus for receiving 
alarms from multiple network 1 5 management servers , applying 
policies to those alanns and forwarding the alarms that conform to the 
policies to one or more network management applications, such as a 
telephonic alarm notification method and apparatus. 

Background of the Invention 

SpectruMTMis a model-based network management system, sold by Cabletron 
Systems, Inc., Rochester. New Hampshire, for maintaining and... the 
network . 

Summary of the Invention 

The present invention is directed to an apparatus and method of alarm 
notification which includes: a) receiving alarms from multiple network 
management servers ; b) assigning policy -based filters to associated 
network management applications; and c) applying the assigned policy 
-based filters to the alarms and for the alarms that pass the filters, 
generating an alarm notification forwarding the same to the associated 
network management applications. 

In an embodiment described herein, a user designates a plurality of such 
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51 6892693 COMPUTERS OR PCS OR NODES OR TERMINALS OR WORKSTATIONS OR 

WORK () STATIONS OR CLIENTS OR SERVERS 
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ES OR GROUP????? OR CLUSTER???? OR COLLECTION? ? OR FAMILY OR 
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55 4284 955 EVENT? ? OR ALERT??? OR NOTICE? ? OR NOTIFIE? ? OR NOTIFY? 
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Business Editors & High Tech Writers 
NetWorld Interop Atlanta 2000 

ATLANTA-- (BUSINESS WIRE) --Sept . 26, 2000 

CyberlQ Systems, a global provider of Internet traffic and content 
management solutions, today introduced CyberPilot (TM) at the 
Networld+Interop 2000 Conference & Exhibition. CyberPilot is an industry 
first! It is the first product to provide a predictive network policy 
platform capable of automatically detecting and anticipating subtle 
performance problems in e-sites, while at the same time proactively 
correcting them through intelligent, , fine-grain and real-time control of 
high-performance load balancing switches. 

Specifically, CyberPilot automatically analyzes e-site and network 
performance data such as static/dynamic Web transaction latencies and 
resource-based data collected by CyberlQ' s intelligent agents. This new 
product uses novel "objective-driven" anomaly detection algorithms to 
forecast and detect anomalies (performance degradations) in real time, 
including latency-based anomalies, service-level and performance-level 
violations, datagram storms, resource overscript ion , SYN flood attacks and 
application overload. In addition, CyberPilot automatically and proactively 
corrects the detected e-site anomalies and problems through decision/policy 
based traffic control and re-direction before anomalies escalate into 
service failures and interruptions. 

Intelligent Fault Detector & Performance Manager 

With CyberPilot, network and site administrators can define the 
desired performance level (PL) of their Web sites and datacenters and let 
CyberPilot take over the task of automatically and dynamically maintaining 
and optimizing the performance of these datacenters. This in turn 
guarantees the online experience of the users of Web sites and datacenters 
in real time. Furthermore, CyberPilot is capable of sophisticated capacity 
planning that anticipates the resource requirements of Web sites as they 
grow and evolve. 

"For the first time ISP, COLO and complex e-site management can rely 
on an intelligent system to identify and automatically mitigate problems 
before they impede system functionality and degrade end user experience, " 
explains Dr. Lawrence Ho, vice president and. CTO of CyberlQ Systems. 
"CyberPilot goes beyond the mere analysis and reporting of anomalous 
threats to e-site and network integrity by the instantaneous implementation 
of corrective action without the need for real-time operator intervention." 

According to Jerald Murphy, vice president of global networking 
strategies, META Group, "Network performance is essential for successful 
eBusiness applications. As eBusinesses look to improve the end user quality 
of experience, service providers will find it increasingly important to 
correlate network systems, and application performance metrics to ensure 
high service levels." 

CyberPilot ' s layer 4 automatic system management functionality is 
the first practical application of what industry observers and research 
scientists have called the need for "self-healing, closed-loop policy 
engines" to improve e-site and network performance. 

CyberPilot is designed for complex, medium-to-large ISPs, COLOs, 
e-sites and networks using one server farm location. CyberPilot 1.0 is 
compatible only with CyberlQ' s HyperFlow3 load balancer, but subsequent 2.0 
versions will be interoperable with all CyberlQ and third party devices 
which have an SNMP agent. CyberPilot is currently in beta site testing at 
SK Telecom and freeship.com and is scheduled to be available for shipment 
in October. 



CyberPilot Technology 

CyberPilot is based on Network Service Anomaly Detection software 
( NSAD) , a proprietary technology developed jointly by CyberlQ Systems and 
Bell Labs, the R&D unit of Lucent Technologies. Through statistical and 
algorithmic analyses, NSAD enables CyberPilot to retrieve relevant 
operational data from servers, switches, routers, probes, etc. to build 
sys uem- speci f ic models of the optimum performance of each individual e-site 
or network in which it is installed. CyberPilot automatically determines 
and recognizes 'normal' performance, even as 'normal' may change over time, 
and is then equipped to proactively identify and correct system anomalies 
in advance of their impact on end users. 

"For example, CyberPilot helps ensure high performance and 
availability by signaling to a . HyperFlow3 switch not to accept any more 
connections and avoid server overload," says John Maddison, CyberlQ 1 s vice 
president of marketing. "Such automatic detection and correction capability 
enhances e-Site reliability by automating the increasingly complex task of 
direct system management by over-extended real-time operators." 

CyberPilot is a trademark of CyberlQ Systems, Inc., a global 
provider of Internet traffic and content management (iTCM) solutions. 
CyberlQ develops and markets increasingly intelligent application-specific 
solutions that accelerate and automate e-sites. 

About CyberlQ 

Headquartered in San Jose, California, CyberlQ is shipping three 
major products based on its switching and content processing architecture. 
HyperFlow3 provides scalable, highly available e-sites. It also features a 
multi-level clustering architecture and a specialized media pipe' for fast 
rich media downloads. HyperWAN(TM) uses network-aware global traffic 
distribution techniques to enable efficiently mirrored e-sites. 
HyperCommerce ( TM) provides fast and reliable e-commerce transactions. It 
uses multiprocessing technology to scale SSL acceleration and process 
transactions at the content-level. The Company's Web site is at 
www . c y be r I Qs y s . c om . 
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server density allows Provider-1 2000 to manage 200 customers on a 
single management server. Additional Provider-1 servers can be linked into 
a management server farm to enforce policies on thousands of sites 
with a single management view. Additional enhancements include automated 
backup and restore of policies , remote updating of enforcement software 
and integrated VPN. QoS enables prioritization of VPN and other 
mission-critical applications . -Check Point Software Technologies 
www.checkpoint.com. . . 
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Load-balancing technology helps performance-marketing company Be Free 
rapidly scale its infrastructure without breaking the bank. -- Loading 
Up: High-Speed Transaction Processing on the Internet. (Company Business 
and Marketing) 
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. . . to Be Free ' s scalable environment. 

Typically, a load-balancing server is a standalone, hardware/software 
box that sits between a router and an internal server farm . It directs 
incoming traffic to an appropriate server, based on policies configured 
by an administrator. These policies , or rules, tell the load balancer how 
to select the most appropriate application server for a specific request. 
For example, a simple rule might be ... response to this need is its new 
Envoy product, which turns geographically dispersed server farms into a 
single, usable cluster. This means that load-balancing policies can be 
tuned to direct an incoming request to the server farm that is 
geographically closest to the user sending the request. 

Be Free is currently evaluating the Envoy product and will likely 
implement it when its... 
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... fast and cost effective. In IP networking, all intelligence is 

delegated to the edge--somet imes even to the hosts themselves--or to 
application servers executing policy management, directory management, 
call control and user profiles. Multiple vendors are offering voice 
gateways and next-gen switches in which intelligence is stripped from the 



equipment and delegated to a server farm . Standards are being shaped in 
chis direction and the Multiservice Switching Forum is devising an 
architecture that calls for the same paradigm in the ATM... 
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. . . control software, this week at Networld + Interop. 

The bandwidth-management feature gives IT managers the ability to 
control and account for bandwidth use by client, server farm , 
application, user class or type of content, the vendor said. This gives IT 
the ability to enforce bandwidth utilization and policies , and enforce 
contracts guaranteeing specific amounts of bandwidth. 

Beta tester d'Mitri DeVos, manager of system operations for 
Computer.com, an online service that educates... 
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. . . We will be increasing that number in the future, " he says. 

Schooler says, multiple Provider-1 2000 servers also can be linked 
server farm and scaled to manage hundreds of customer policies 
thousands of sites through a single management view. 

Kimberly Price, senior VP of product marketing for Telenisus 
says the Rolling Meadows, 111., service... 
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ABSTRACT: Seagate Software uses its own Manage Exec software as well as 
commercial products to manage its Web server farms. The company determined 
that its Web server farm management tools needed to support virtual 
network management of servers in different geographic locations, and they 
had to work with the company's existing network management and security 
policies . They also had to be easy to learn and implement, configurable to 
meet evolving needs, and free of any security holes. Seagate Software takes 
advantage . . . 
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. . . automatic system management functionality is the first practical 

application of what industry observers and research scientists have called 
the need for "self-healing, closed-loop policy engines" to improve e-site 
and network performance. 

CyberPilot is designed for complex, medium- to-large ISPs, COLOs, 
•-'-sices and networks using one server farm location. CyberPilot 1.0 is 
• ..mpr.u. i.ble only with CyberlQ' s HyperFlow3 load balancer, but subsequent 2.0 
"fi'sions will be interoperable with all CyberlQ and... 
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... service centers will use Mail.com' s inbound and outbound desktop 

Internet fax service to process a full suite of insurance documents 
including quotes, issued policies , reinstatements, endorsements and 
renewals . 

"Running a fax server farm is an expensive proposition and 
requires, in GEICO' s case, a Microsoft Exchange architect to keep it all 
running smoothly," said Dave Williams, GEICO's... 
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. . . Provider-1 2000 manages up to 200 customers on a single management 

server. In addition, multiple Provider-1 servers can be linked into a 
management server farm , providing scalability for hundreds of customer 
policies enforced at thousands of sites while maintaining a single 
management view. 

"Leading service providers and corporations around the world rely on 
Check Point Software's... 



18/3, K/ll (Item 4 from file: 621) 

DIALOG (R) File 621:Gale Group New Prod . Annou .( R) 
(c) 2004 The Gale Group. All rts. reserv. 

02457936 Supplier Number: 61520987 (USE FORMAT 7 FOR FULLTEXT) 
ArrowPoint Unveils Web Switches With Three-Fold Performance Boost. 

Business Wire, pi 2 55 
April 17, 2 000 

Language: English Record Type: Fulltext 
Document Type: Newswire; Trade 
Word Count: 1162 

... CS-150. ZD Labs configured a virtual Internet Protocol (VIP) 

address on the CS-150, which served as the IP address for the test Web 
server farm . Two content policy rules were configured in the CS-150 to 
distribute incoming HTTP requests across the pool of servers. The client 
nest bed consisted of 15 physical... 
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... CS-800. ZD Labs configured a virtual Internet Protocol (VIP) 

address on the CS-800, which served as the IP address for the test Web 
server farm . They configured two content policy rules in the CS-800 to 
distribute incoming HTTP requests across the pool of servers. The client 
test bed consisted of 30 physical PCs, each... 
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. . . a single server, significantly lowering operational costs and 

complexity for service providers and large enterprises. Multiple Provider-1 
servers can be linked into a management server farm , providing 
scalability for hundreds of customer policies enforced at thousands of 
sites while maintaining a single management view. 

Also, today, Check Point is announcing MultiGate, a new product that 
enables MSPs to . . . 
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e-commerce companies can make improvements in three main areas to 
optimize web site Quality of Service: the web pages themselves, the 
configuration of the server farm , and the connections to the Internet. 

In addition, Mr. Siegel will serve as the instructor in the Intro 
Session "Introduction to Quality of Service and Policy -based Networking", 
which will be given on Tuesday, May 11, at 2:00 and again on Wednesday, May 
12 at 10:15. 

Mr . Siegel is . . . 



18/3, K/15 (Item 8 from file: 621) 

DIALOG (R) File 621:Gale Group New Prod . Annou .( R) 
(c) 2004 The Gale Group. All rts. reserv. 

01691395 Supplier Number: 50237320 (USE FORMAT 7 FOR FULLTEXT) 
3Com Applauds Ratification of IEEE 802. lp Standard; Approval to Accelerate 
Industry's Move to Converged Networks. 

Business Wire, p08111273 



August 11, 1998 

Language: English Record Type: Fulltext 
Article Type: Article 
Document Type: Newswire; Trade 
Word Count: 871 

. . . network devices, avoiding the need to use proprietary 

; \r : ■; i r i za t: ion schemes and allowing IT to gradually deploy converged 
!!;- i: works in the core, the wiring closet, the server farm and the 
desktop as needed. 

"802. lp is an important part of policy -based networking that will be 
especially significant to corporations and carriers as they move to a 
single, consolidated transport to carry different types of traffic... 
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. . . information in the content requests gives the switch the 

information it needs to determine optimum content location, Quality of 
Service, and bandwidth requirements, and explicit policy definition 
allows additional control for the Web site administrator. Web traffic is 
distributed based on content (including HTTP, TCP, and UDP) to the optimal 
Web server, located in the local Web farm or at a remote location. 
Highly granular bandwidth management ensures that each Web flow, based on 
content requested, receives the necessary bandwidth through the switch... 
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... CS-150. ZD Labs configured a virtual Internet Protocol (VIP) 

address on the CS-150, which served as the IP address for the test Web 
server farm . Two content policy rules were configured in the CS-150 to 
distribute incoming HTTP requests across the pool of servers. The client 
test bed consisted of 15 physical... 
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... traffic and avoids bottlenecks. 

Provider-1 2000 can manage up to 200 customers on a single server, or 
it can be linked into a management server farm . It also can restore, 
revoke and archive security policies . 

Provider-1 2000 starts at $79,900 and will become 
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... senior VP of business systems. He added that the CoreBuilder line 

can now be deployed in all areas of the network including the wiring 
closet, server farm and data center. The company has also added a 
broad set of services to the platform including LAN telephony, voice 
gateways and policy services. Future enhancements include partnerships 
with load-balancing companies for integration into the 9000 and a Windows 
2000 blade, to be revealed early next year... 
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... network devices, avoiding the need to use proprietary 

priori tisation schemes and allowing IT to gradually deploy converged 
networks in the core, the wiring closet, the server farm and the 
desktop as needed. 

"802. lp is an important part of policy based networking that will 
be especially significant to corporations and carriers as they move to a 
single, consolidated transport to carry different types of traffic... 
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... content closer to the customers requesting it. The combination also 

adds a layer of policy-based traffic management not available using 
Akamaizer software alone. Those policies determine which types of content 
should be put on the Akamai network without the customer having to manually 
code it. A CacheFlow device sits in front of a Web server farm , 
typically behind a Layer 4 switch. 

The deal highlights the problems related to performance and content 
availability that many corporate intranet and e-commerce sites... 
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. . . QoS Control for e-business, Server Control for e-business and 

Desktop Control. 

Traffic Control performs several functions for managing traffic going 
to an NT server farm . The abilities include load balancing among the 
servers, providing security via a firewall and collecting traffic 
statistics. QoS Control can prioritize different packets, based on 
policies . Server Control monitors applications on the servers themselves, 
and can automatically restart the applications or reboot the server if 
problems occur. Pricing was not available... 



18/3, K/23 (Item 3 from file: 16) 

DIALOG ( R) File 16: Gale Group PROMT (R) 

(c) 2004 The Gale Group. All rts. reserv. 

06344778 Supplier Number: 54649303 (USE FORMAT 7 FOR FULLTEXT) 

ISS RealSecure Pushes Past Newer IDS Players. (Software Review) (Evaluation) 

Shipley, Greg 

Network Computing, p95(l) 

May 17, 1999 

Language: English Record Type: Fulltext 
Article Type: Evaluation 
Document Type: Maga zine/ Journal ; Trade 
Word Count : 4574 

. . . yet barely used area of your network, you may wish to enable all 

attack signatures-or maybe even create some custom ones. However, that same 

policy , crammed with enabled checks, may send your console into a 
tailspin if installed on a sensor attached to a saturated Web farm . By 
using multiple policies , administrators can create policy templates and 
swap them out at will. In the case of a highly trafficked Web farm , 
administrators may choose to disable some of the more informational/trivial 
checks. Removing checks for ActiveX usage warnings, for example, may lower 
the percentage of... 
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... users, it's the wrong approach," says John Morency, vice president 

of network solutions practices at Renaissance Worldwide, a consulting firm. 
"The real issue is policy , end-to-end QoS, not switching." 

Nevertheless, some pioneering users are giving Layer 4 a try. ISP 
Mindspring Enterprises is test-running Layer 4 in its server farm of 50 
e-mail, Web and FTP servers. Brandon Ross, Mindspring 's chief network 
engineer, says the company plans to use the forthcoming Layer 4... 
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../Phis switch, which features six Gigabit Ethernet ports and 16 10/100 
Fast Ethernet ports, is ideal for trunking ultrafast connections to the 
workgroup or server farm . The Summit4 features Extreme Networks' 
policy -based Quality of Service and wire-speed switching, and it can also 
act as a full-fledged router. 
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. . . network and the other attaches to the Internet or wide-area router. 

The AC300 adds a third 10/300 Ethernet connection that attaches to the 
server farm to ensure policy -based server availability. 

The AC200 is priced at $7,000, and the AC300 is priced at $13,000. 
Both products will be unveiled at Internet... 
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...TEXT: content closer to the customers requesting it. The combination also 
adds a layer of policy-based traffic management not available using 
Akamaizer software alone. Those policies determine which types of content 
should be put on the Akamai network without the customer having to manually 
code it. A CacheFlow device sits in front of a Web server farm , 
typically behind a Layer 4 switch. 

The deal highlights the problems related to performance and content 
availability that many corporate intranet and e-commerce sites... 
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...ABSTRACT: enterprise net backbones, the switch is designed for service 
providers offering voice-over- I P, Web hosting or other data services 
requiring traffic classification and priority policies . Over in the 
Gigabit Ethernet Alliance booth, 3com was showing an unannounced SuperStack 
gigabit copper switch for server farm and workgroup aggregation. The 
switch features six 100/1000-TX ports and two lOOOBase-SX ports with RJ-45 
and MTRJ jacks. In November, Nortel... 
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...TEXT: port on the switch management module. This allows you to create a 
separate management LAN completely isolated from the users 1 network. 

Berkeley plans to add server farm load balancing functions and 

implement integrated policy control using Windows NT's Active Directory 
Services, Novell, Inc. 's Novell Directory Services and other Lightweight 
Directory Access Protocolcompatible directories. The company also plans... 
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•The bandwidth-management feature gives IT managers the ability to 
control and account for bandwidth use by client, server farm , 
application, user class or type of content, the vendor said. This gives IT 

■ he ability to enforce bandwidth utilization and policies , and enforce 

■ races guaranteeing specific amounts of bandwidth. 

h^ia tester d'Mitri DeVos, manager of system operations for 
Cofnputer.com, an online service that educates... 
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... We will be increasing that number in the future," he says. However 

, Schooler says, multiple Provider-1 2000 servers also can be linked into 
a server farm and scaled to manage hundreds of customer policies at 
thousands of sites through a single management view. 

Kimberly Price, senior VP of product marketing for Telenisus Corp., 
says the Rolling Meadows, 111., service... 
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. . . yet barely used area of your network, you may wish to enable all 

attack signatures-or maybe even create some custom ones. However, that 
same policy , crammed with enabled checks, may send your console into a 
tailspin if installed on a sensor attached to a saturated Web farm . By 
using multiple policies , administrators can create policy templates 
and swap them out at will. In the case of a highly trafficked Web farm 
, administrators may choose to disable some of the more 

informational/trivial checks. Removing checks for ActiveX usage warnings, 
nor example, may lower the percentage of. . . 
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TEXT: 

keen new gigabit Ethernet switch. This baby was designed to put my 
servers at the core of a gigabit Ethernet backbone. And what a screamin' 
server farm this switch could build! It can support up to 25 gigabit 
Ethernet ports and route more than 50 million packets per second at Layer 
3. It supports policy -based QoS (quality of service) and vLANs (virtual 
LANs) . Its backplane is over SOGbps wide. I even love its management 
applicat ion . 
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... users, it's the wrong approach," says John Morency, vice president 

of network solutions practices at Renaissance Worldwide, a consulting 
firm. "The real issue is policy , end-to-end QoS, not switching." 

Nevertheless, some pioneering users are giving Layer 4 a try. ISP 
Mindspring Enterprises is test-running Layer 4 in its server farm of 
50 e-mail, Web and FTP servers. Brandon Ross, Mindspring's chief network 
engineer, says the company plans to use the forthcoming Layer 4... 



18/3, K/35 (Item 6 from file: 647) 

DIALOG (R) File 647:CMP Computer Fulltext 
tc) 2004 CMP Media, LLC. All rts. reserv. 

011.59275 CMP ACCESSION NUMBER: NWC1 99804 1 5S002 6 

Extreme Networks Summit4 Integrated Server Switch (Infrastructure) 
Pam Brill 

NETWORK COMPUTING, 1998, n 907, PG168 
PUBLICATION DATE: 980415 

JOURNAL CODE : NWC LANGUAGE: English 

RECORD TYPE: Fulltext 
SECTION HEADING: Fast and Furious 
WORD COUNT: 86 

TEXT: 

. . . This switch, which features six Gigabit Ethernet ports and 16 

10/100 Fast Ethernet ports, is ideal for trunking ultrafast connections 
to the workgroup or server farm . The Summit4 features Extreme 
Networks' policy -based Quality of Service and wire-speed switching, and 
it can also act as a full-fledged router. 
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. . . VPN-l/FireWall-1 

for large numbers of multiple customers, each with multiple enforcement 
points. Multiple Provider-1 servers can be linked into a management 

server farm , providing scalability for hundreds of customer policies 
enforced at thousands of sites while maintaining a single management 
view . 
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... aspect. In general, all such mechanisms require configuration and 

control of end-to-end components, middleware services, and underlying 
network/ operating-system-level resources . 

The policy -enforcement mechanisms in the figure are generated by 
the middleware and interfaced with both the application-defined components 
and che system services. Certain QoS mechanisms... 

...by the underlying operating system kernel (10). Similarly, the 
requirement of a desired level of availability of an application's data 
might involve replication at various nodes that were selected based on 
their observed uptime. 

The system-defined administrative policies for resource allocation 
dominate application-defined policies . Mechanisms are required for 
monitoring underlying system-level resources, as well as application-level 
components, and resource management decisions may need to be changed when 

...and other characteristics of network resources. I therefore emphasize 
the following services for emerging applications and how they need to be 
orchestrated by the middleware. 

Event notification . Event service is a core component of 
middleware for dynamic environments. The publisher-subscriber model is a 
commonly adopted paradigm for event services. Policy-driven middleware... 
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usage, system and application events as well as TCP/IP port 
utilization and health monitor alerts. We were able to set threshold limits 
and were notified via e-mail and event log entries when they were 
exceeded . 

An especially convenient feature of Application Center 2000 is that 
the product synchronizes server management policies across all selected 
servers in the cluster, thus ensuring that our policies were enforced 
without a lot of additional administrative overhead. 

During tests, we quickly distributed network and component processing 
loads among the clustered servers . Application Center 2000 uses a 
weighted fair-queuing mechanism to divvy up the network load. This same 
process allowed us to remove servers from the... 



15/3, K/3 



(Item 3 from file: 275) 



DIALOG (R) File 275: Gale Group Computer DB(TM) 
(c) 2004 The Gale Group. All rts. reserv. 

02062152 SUPPLIER NUMBER: 19387791 (USE FORMAT 7 OR 9 FOR FULL TEXT) 

Manage X for Win NT uses ActiveX to patrol systems. (NuView network 
management tool) (PC Week Netweek) (Software Review) (Evaluation) 

Peterson, Eric 

PC Week, vl4, nl8, pll3(2) 

May 5, 1997 

DOCUMENT TYPE: Evaluation ISSN: 0740-1604 LANGUAGE: English 

RECORD TYPE: Fulltext; Abstract 

WORD COUNT: 1389 LINE COUNT: 00114 

found Console well-laid-out . Quickly informing administrators of 
client status, Console receives alerts from client and server FMs , 
displaying them in different colors to indicate event severity at a 
glance. Overall, Console looks quite like Windows' Event Viewer. 

From Performance Monitor, we were able to compare, in real time, the 
status of a particular item of any grouping of NT servers and/or 
workstations at once. For instance, we compared the percentage of 
processor utilization across several nodes . 

For that matter, if The Microsoft Network had been using Manage X to 
monitor its Exchange servers for capacity planning, the April 16 emergency 
shutdown, necessary to add capacity to their servers, would not have been 
such a surprise and embarrassment. If a Manage X-like policy had been in 
place, a customized script not only could have sent a proactive 
notification to the responsible Exchange server administrator that the 
server was . . . 
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... is designed to provide data management and application development 

capabilities across a network of dissimilar hardware and software systems. 
INGRES provides the ability to establish multiple , multithreaded servers 

to access and update shared data. Its Knowledge Management facility 
enforces business policies and referential integrity constraints. INGRES 
Event Alerters can be used for creating applications that dynamically 
respond to business requirements. Objects can be defined and managed via 
SQL commands. INGRES/Windows4GL, an object... 
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... through SQL commands. 

The announcement also initiated Ingres' new strategy of offering 



enhancements to its entire suite of client -server products simultaneously 
across a wide range of platforms, including PCs , VMS minicomputers and 
all major Unix systems. 

INGRES Release 6.4 is the first relational database management system 
to provide database event alerters . Just as INGRES rules automatically 
trigger internal database procedures to enforce policies , event 
alerters automatically trigger external application programs through SQL 
commands . 

" Event alerters provide a simple way of capturing events that are 
a natural result of everyday business activities, and allow organizations 
to better model their business operations... 
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... of an organization's overall security program. We recommend that 

corporations implement flexible content filtering tools, like Web Inspector 
v6, to enforce their Internet usage policies and protect against reduced 
productivity, legal liability and network congestion." 

"Elron Software worked extensively with customers to develop a new 
product that would meet their... 

...reliability, flexibility and ease-of-use. And, I'm thrilled to report 
that Web Inspector v6 exceeds clients' expectations by combining enterprise 
scalability with enhanced policy -based control and a wide array of 
reporting options," said Ray Boelig, CEO and president, Elron Software. 
"Web Inspector v6 enables companies to clearly see what is occurring on 
their networks and make informed business decisions to protect their 
assets, people and reputation." 

Key features of Web Inspector v6 include: 

-- Distributed Deployment 

To accommodate enterprise environments, Web Inspector can 
at multiple locations, all managed with centralized 
reporting. This unified approach eliminates the need 

mul tiple 

servers every time a policy changes. 
Policy -Based Control 

With rules-based management, Web Inspector v6 can be customized to 
enforce an organization's unique Internet usage policy 
Organizations 

can control surfing by user, group, category or time of day. And, whe 

n 

policy 

changes occur, intuitive wizards walk administrators through 
creation of rules within seconds. 
-- Directory and LDAP Support 

The new product supports Microsoft Active Directory, 



be deployed 
policy and 
to update 



the 
Novell . . . 
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provide user management and real-time troubleshooting -- reducing 
threats to system uptime. Centralized event management and reporting enable 
IT administrators to ensure established systems and policy management is 

be i ng followed . 

"IT is most concerned with cost, credibility, and uptime. The Norton 
<'■.:.• :Vuus Enterprise Solution enables IT professionals to take a proactive 



...president of Symantec's Security and Assistance Business Unit. "Symantec 
System Center provides organizations with the management tools required to 
proactively set and lock down policies that keep systems up-to-date and 
properly configured." 

Symantec System Center enables centralized deployment of Symantec's 
intelligent solutions and updates across multiple Windows NT and NetWare 
networks. Symantec System Center provides complete event management. IT 
administrators can customize alerts /escalations and automate responses to 
specific actions for individual users, server groups, and across multiple 
plat forms . 

Symantec System Center also enables real-time communications with. . . 

...servers, enabling administrators to respond quickly to potential 
threats. For example, administrators can use Symantec System Center to 
enact virus sweeps across the individual nodes, groups of nodes or the 
entire enterprise from a single location. 

Built on award-winning technology from Symantec and Intel, 
administrators can use Symantec System Center to automatically. . . 
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... Billiard, CEO of Acotec Inc. "Acotec RAM 2.0 provides the system 

administrator with an invaluable tool for accomplishing this by taking the 
concept of policy -based management further, and adding event-driven 
management to automate immediate actions." 

Acotec RAM 2.0 offers easy, secure, and cost-efficient user 
administration through the definition of user policies . Access rights, 
dial-in times, resource allocation, and general security settings can be 
centrally defined. The risk of system crashes is reduced by the centralized 
security for multiple servers . If one server crashes, dial-in rights 
can be made immediately available on another server in the group. 

The evaluation and monitoring functions of Acotec... 

...RAM 2.0 continuously monitors the status of the dial-in channels and the 
available capacity of each RAS server. The Internet-based messaging 
services inform the administrator when events arise. The administrator 
can easily define new events as needed. 

Acotec RAM 2,0 addresses an explosive market. A recent report by IDC 
(Open Systems . . . 
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... control of them. In addition, ServerAdmin Plus 6.0 complements the 

new administration features of Notes R5, extending administration 
capabilities to the next level of policy -based management." 
New Additions to ServerAdmin Plus 6.0 

The goal of Percussion ServerAdmin Plus 6.0 is to provide additional 
analysis capabilities for complex areas of Notes administration. New 
features include: 

--Replication Analyzer: Audits servers and databases for 
configuration 

issues preventing successful replication, such as the occurrence 
of multiple replicas. It then tells the administrator what needs 
correction . 

--User Analyzer: Audits user interaction with databases across 

multiple servers , indicating database activity, access levels, 
role membership, and other privileges. 

--NSF Search: Allows searching for Domino databases by database, 
Access Control List (ACL) , or design... 
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lead the market in implementing storage management features most 
desired by enterprise customers, CommVault Systems announces the capability 
to automatically monitor and administer storage management policies 
across multiple CommVault servers from a single, centralized network 
management console. Through a CommVault Knowledge Module for PATROL 
designed with BMC Software Inc., CommVault Systems... 

...CommVault Knowledge Module for PATROL lets users set configurable 
parameters for up to three levels of alerts and alarms, quickly and easily 
execute backups across multiple CommVault servers , restart failed 
backups, initiate backups, accurately assess the status of backup media 
including historical usage, and actively monitor backup server /client 
connections. Using a peer... 

...single, multi-tasking agent operates autonomously, automatically 
discovering and taking corrective action on each managed CommVault server. 
The knowledge module monitors hundreds of parameters for multiple 
servers , detecting and correlating events , initiating corrective 
actions, and providing alerts and alarms on undesired conditions. Alarms 
can be forwarded to any SNMP standard network management tool such as BMC 
Software's PATROL, Tivoli and HP... 
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dedicated to providing client /server security solutions for 
multi-platform environments. NIT provides a range of enterprise-wide 
information security software and professional services. NIT policy -based 
security solutions are scaleable to any size organization and work 
effectively and transparently across a range of hardware platforms 
including UNIX workstations , servers and PCs . 

UniShield, the first of NIT's enterprise-wide security products for 
Managing client and servers in a distributed environment, was introduced in 
warly 1994 for Sun Microsystems product family. Support for Hewlett-Packard 
rind IBM plan forms followed. UniShield covers all aspects of client /server 
security including policy management and enforcement, user 
administration, user access, account control, security event monitoring, 
intrusion detection and notification and authentication management. 

Security Dynamics' technology has been integrated into NIT products to 
provide positive SecurelD token two-factor authentication . NIT products are 
designed to . . . 
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. . . chat they have a log of all the hardware and software on their 

yy.-'.Pins, 51 per cent said no. When asked if they knew how many PCs 
w--><> ^. '.ached to their network, 24 per cent said they did not know. 

On Line subject of misuse of corporate systems, 81 per cent said they 
:.-.d d corporate usage policy in place, 64 per cent said they monitored 
use of their networks and yet 75 per cent were unable to quantify the 
amount; of computer misuse occurring on their network. This indicates 
that while many IT managers are taking steps to put controls in place they 
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provide user management and real-time troubleshooting, reducing 
threats to system uptime. Centralized event management and reporting enable 
IT administrators to ensure established systems and policy management is 
being followed. 

"IT is most concerned with cost, credibility, and uptime. The Norton 
Antivirus Enterprise Solution ...president of Symantec's Security and 
Assistance Business Unit. "Symantec System Center provides organizations 
with the management tools required to proactively set and lock down 
policies that keep systems up-to-date and properly configured." Symantec 
System Center enables centralized deployment of Symantec's intelligent 
solutions and updates across multiple Windows NT and NetWare networks. 
Symantec System Center provides complete event management. IT 
administrators can customize alerts /escalations and automate responses to 
specific actions for individual users, server groups, and ...servers, 
enabling administrators to respond quickly to potential threats. For 
example, administrators can use Symantec System Center to enact virus 
sweeps across the individual nodes, groups of nodes or the entire 
enterprise from a single location. Built on award-winning technology from 
Symantec and Intel, administrators can use Symantec System Center to 
automatically. . . 
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... they represent. The depth and breadth of resources that can be 

available through a management firm provide an environment adaptable to 
change. Reacting to new policies , programs, and market factors, ...also 
benefit from the continuity afforded by the depth of management at 
association management companies. Backup executives are assigned to 
associations so that, in the event of turnover, a new, informed 
executive director can step in virtually at a moment's notice. 
Synergies 

Because AMCs are staffed to manage multipLe clients , each 
association benefits from the inherent synergies, the most important of 
which are these: 

* Executive input. Executives at management firms are stimulated by 
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Customer service demands new architecture, (message-oriented middleware) 

(includes related articles on managing multitier client/server projects 

and on better service) (Technology Information) 

Schreiber, Richard 
Datamation, v41, n23, p48(3) 
Dec 15, 1995 

ISSN: 1062-8363 LANGUAGE: English RECORD TYPE: Fulltext; Abstract 

WORD COUNT: 1875 LINE COUNT: 00159 

... a server is, viewing applications as sets of logical domains that 

can be moved around the network at will. 

These infrastructure services can enforce business policies , keep 



other peer services informed of changes, and notify users of important 
events , such as a rate change or new customer promotion. Some application 
services don't need to be connected to a database at all, but can... 

...as a service dispatch call or credit card authorization. 

This type of architecture is highly scalable, since the shared 
application services can be cloned among multiple servers as 
application demands increase. For example, analysts had predicted the 
credit card authorization service would be accessed about 100 times per 
hour, but actual use... 
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Merger counseling 
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...TEXT: gathering information, look at both the formal and informal 
business cultures. Formal culture involves everything that's official-the 
company's mission and value statement, policy manual, operating 
procedures, etc. Informal culture involves what really happens within a 

company- the actual values, beliefs and practices. 

Resource 

CUES' book Mergers by Example: Partnering for Mutual Benefit examines 
credit union mergers in detail. Look for it at www.cues.org; click on 
"Shop. " 

As founder and president of Business Advancement Inc., Pamela Harper has 
worked with a variety of clients in entrepreneurial firms, mid-sized 
companies, and large corporations to transform business strategy into high 
performance. She can be contacted at 201.612.1228, or... 
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Will year 2000 bug make your business sick? 

Brandl, Philip 
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WORD COUNT : 77 5 

...TEXT: Credit cards expiring in "00" have been rejected; a large 
insurer's mainframe shut down because it interpreted "00" as an invalid 
renewal date for policies ; a food wholesaler reportedly threw away huge 
inventories dated "00." 

Obviously, the Year 2000 problem is a serious business challenge to be met 
at the . . . 

...capacity and processing speed, so they coded years as two-digit numbers, 
e.g. 08/01/85 instead of 08/01/1985. When 2000 arrives, many older 
computers and software programs will be unable to distinguish the year 
2000 (00) from 1900 (00) it's already happening . 

NHMA " Alerts " Members, Shares Resources 

Although many organizations have undertaken Year 2000 compliance, others 
are just beginning to realize the magnitude of the problem. As an 



organization . 
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...TEXT: powerful new search engine like Digital Equipment Corp.'s 
AltaVista {www.altavista.digital.com) and you get 20,000 possible links. 

Corporations with no formal policy for monitoring and reviewing internal 
b sir.es are in danger of having their intranets become equally as chaotic 
-i Mir ricu it to navigate, Finkelstein says. "Just... 



. . i-;v^ ryone should do Web applications." 



it's so easy to publish documents on a Web that some IT groups are deaf to 
the intranet explosion happening around them. Steven Telleen , director 
of Amdahl Corp.'s IntraNet Solutions Group in Sunnyvale, Calif., says he 
knows of some IT managers who set Web crawlers free on their nets and 
discovered twice as many internal Web servers than they knew about. 
The enlightened have been keeping a watchful eye on early intranet 
installations and then implementing formal policies when growth 
escalates . 

At Allied Signal Corp., for instance, internal Web sites have been 
proliferating for some months now. This rapid growth has prompted the 
company's IS council to think about formulating a Web authoring policy , 
says Chuck Necker, Webmaster at the Computing Technology Center for Allied 
Signal's central business services unit in Torrance, Calif. 



But a sharp intranet growth... 
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ArcSight's flexibility and interface helps it lead the pack of security 

data organizers 
Security Event Management 
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Text : 

... same: to make sense of the data your security infrastructure provides. 
The term SEM seems to best describe the task these products perform. 
Devices generate alerts or logs on security events , such as blocked 
packets, failed logons or attempted exploits. Managing these events is the 
next step in the evolution of the corporate security infrastructure. 
ArcSight . . . 

. . . try to work with the corporate database team or look at hiring some 
help. Hand in hand with database management and maintenance is data 
retention policy . Data retention policies can have a large effect on 
your SEM implementation because they mandate some of your hardware 
requirements. The products we tested all handle SEM differently... 



... of Tenable, sent us pre-conf igured hardware. The installation team came 
in to configure the device for our lab environment and set everything up so 
alerts and events were being sent to their system from three initial 
devices in our test bed - a NetScreen Technologies firewall, a Cisco VPN 
Concentrator and a Cisco. . . 

. . . t want logged to the central server. A major trial of the products was 
adding new devices to monitor. We gathered a test bed of various 
firewall, IDSs, Web servers , operating systems, network infrastructure 
devices and security integrity products, and attempted to monitor them. 
Tenable did not fully participate in this test because it only... 
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Taking the tedious out of storage management 

new-style automated hierarchical storage management products add more 
smarts to managing aging data. 

Byline: deni connor 

Journal: Network World Page Number: 20 
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Text : 

. . . style automated hierarchical storage management products add more 
smarts to managing aging data, n By Deni Connor What once was old is new 
again with policy -based storage management software. It could change the 
way companies think about how they store, archive, back up and recover 
corporate data. This new breed... 

. . . to write scripts to identify what data needs moving, or groom disks 
constantly to eliminate files that are no longer required by law or company 
policy . And gone will be the days spent culling data from disks because 
drives have reached their capacity or redistributing data to other disks to 
achieve . . . 

... use. That's not all. Automated storage management software extends the 
reach of traditional HSM tools by looking at data in use and, following set 
policies , making decisions on how applications or business processes are 
tied to the data. Such tools will become increasingly desirable as users 
struggle to cope with... 

. . . the firm is evaluating products that would let it separate attachments 
and store them centrally, thus saving disk space, Kedem says. He is looking 
at policy -based e-mail archiving products from FalconStor Software, IBM, 
Legato Systems and Sun that migrate messages to tape after storing them on 
dis k for a . . . 

... of project directories. Under these projects is a set of directories, 
with one being an 'archive' directory. With the CA software, we set up a 

policy to migrate files within this directory only," he says. Now Hawkins 
is looking into new policy -based storage management tools that would set 

policies for moving data based on project status. HSM hasn't evolved in 
the open systems arena, either. In this environment, when more storage is 
needed ... could specify that a mission-critical Oracle database be recovered 
before any other application in the event of a failure. Alternately, 
network managers could set policies granting more bandwidth for backups 
r.o mission-critical applications. CreekPath is one of the only start-ups 
shipping such a product. Its AIM software defines three types of policies 
: explicit, rules-based and constraint. Explicit policies are 
user-definable rules affecting specific parameters such as RAID levels. In 
an explicit policy , a volume might be mirrored remotely to another device 
to ensure availability. Rules-based policies invoke a specific user or 
system action when an event occurs. For instance, AIM will notify 
administrators when a drive is underutilized so they can shift storage to 
i.L. Constraint-based policies put limits on a device - if the device is 



used, it also must be mirrored to a remote array for fault-tolerance. But 
storage management... 

. . . management with its Application-Centric Storage Management initiative, 
and CA and EMC promise such capability by year-end. Meanwhile, Tivoli has 
promised to announce a policy -based storage resource management package 
later this month Fast recovery Automation is being applied smarter than 
ever before to the back-up and recovery process... 

... upgrade their business continuity plans, while 24% said they revised 
their plans within the last six months. Start-ups such as Avamar 
Technologies are developing policy -based software that saves data to 
inexpensive disks rather than tape, thus speeding the back-up and recovery 
process and shrinking the amount of time... 

... as 100 times faster than tape. Connected, a PC management and 
data-recovery company in Framingham, Mass., which backs up about 1 million 
computers for several large clients , has turned to EMC 1 s Centera 
hardware and software for automated storage operations. The company is 
replacing tape drives with Centera' s inexpensive disk and using policy 
-based software to migrate data from primary Symmetrix storage to Centera 
after it reaches a certain age, says Tom Hickman, engineering operations 
manager. "The data... 

. . . oyr.es no store data on. When capacity reaches 85%, the migration utility 
sends the data automatically to a tape library or to the Centera." Setting 
policies and then letting Centera and its software act on them saves 
Hickman from having to perform the tasks manually. Automation is even 
coming to the . . . 

...500 per server, and could save IT managers considerable time. Some large 
companies run as many as 40 back-up packages, vendors say. No doubt, 
policy -based automated storage promises to ease the management of rapidly 
growing and out-of -control media. When automation hits storage, users will 
have the luxury of setting policies and letting the system do the work, n 
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Crying wolf: False alarms hide attacks 

Eight IDSs fail to impress during the monthlong test on a production 
network . 

Byline: By David Newman, Joel Snyder and Rodney Thayer 
Journal: Network World Page Number: 57 

Publication Date: June 24, 2002 
Word Count:: 34 95 Line Count: 310 



...';.! sco ' s sensor never locked up, but its management software was another 
:5vo::y. The vendor initially supplied Version 2.3.31 of its Cisco Secure 

Policy Manager (CSPM) . CSPM is a powerful application with tons of useful 
features and one very significant downside: Whenever its database grows too 
large, the applicat ion . . . SNP ) software uses a multitiered approach in which 
different machines can be used as sensors; consoles (for configuring the 
sensor); databases (for storing alarms from- multiple sensors); and 

clients . In our experience, it was the SNP client that locked up 
repeatedly. We'd see CPU utilization rise above 90% and stay there. In that 
state, it was impossible to tell what events Intrusion's client was and 
wasn't seeing. The vendor's fix was twofold: First, Intrusion tuned its 
database not to store any alarms for... 
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Making Your Website Healthy- 
Building your Web site was easy - keeping it running is the next step. 

Byline: Denise Dubie 

Journal: Network World Page Number: 54 

Publication Date: November 06, 2000 
Word Count: 1696 Line Count: 158 

Text : 

. . . sells products that can be programmed to lessen the need for human 
intervention when problems occur, although a network manager still needs to 
set predefined policies . Other products have "learning" agents that, 
based on historical reports from your network, can intelligently make a 
decision on what to do in a per formance ... times can tell network managers 
how to allocate resources to best serve customers frequenting the site. 
Proacci veNet has developed a system of learning software that tells you 
what is happening on your Web site and when, and then delivers the data 
diceccly correlated to your business goals. Proact iveNet ' s e-Transaction 
Management helps customers set... 

...pinpoint the true source of poor Web site performance. "My department is 
application support, and the applications can get very complicated, hitting 
a couple of different databases and servers that are all over, " she 
says. "All things were being monitored, but not monitored together. Now I 
can see how that application is affecting the... 
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Peeping tools 

Nine tools that can snoop on your employees . 

Byline: TRAVIS BERKLEY 

Journal: Network World Page Number: 55 

Publication Date: July 10, 2000 

Word Count: 5117 Line Count: 454 

Tex'c: 

. . . i. he software remotely to any machine in the domain, making the task 
manageable. The replication features ensure that each installation uses the 
sam<? sec of policies and filters. It works in two ways: Each client agent 
monitors file activity in real time as items are saved, moved or renamed. 
The cent ral . . . 

... files, such as graphics (either 2-D image files or 3-D game files), 
audio files and Office files. The screening groups are referenced by 

policies that determine what action to take when it finds a "bad" file. 

Policies can be configured individually or by workgroup. Additionally, 
filters can be employed within the policy to skip a particular storage 
area. When the program finds an infraction, the incident is logged on a 
database and stored for a configurable period. . . 

...management console or by e-mail. The program can also make an entry in a 
server's event log or send an SNMP trap. Each policy can have its own set 
of actions. By default, the user is notified of an infraction with a pop-up 
dialog box. But if the policy is set to only observe and record, an 
administrator may choose to not inform the employee of his or her 
transgression and only save the evidence. Your policies may vary. Built 
into the console is a monitor that lists the infractions that have been 
logged. You can run a query that refines this list down to a particular 
policy violation or to a user or group. The results can also be printed 
or saved. A very nice ergonomic feature is a zoom feature that... 

...for example, and not trip any of the policies . But FileScreen 2000 is 
smart enough not to allow renaming back to the offending name. So a cagey 
user would be able to disguise files... 



your fingertips. In fact, if you open up all. 
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Cache panache 

A well-placed caching device can boost Web site performance and cut WAN 
costs . 

Byline: Steven G. Clegg 

Journal: Network World Page Number: 57 

Publication Date: April 10, 2000 

Word Count: 1670 Line Count: 155 

Text : 

... costs. Proxy caches are particularly useful on enterprise intranets. 
They ace as firewalls to shield servers against Internet attacks. A proxy 

: so can act as policy enforcer for a company's Web access, because 
:.:owsers are configured to send requests for Web objects directly to the 
pi o:-:y ca che . Addi t iona 1 1 y , reverse proxy caching in front of your Web 

server farm can decrease the number of origin servers needed. It also 

acts as a buffer to protect Web servers against spikes in traffic and 
guarantees fast... 

... learning more about Linux and Unix. Also consider each product's 
management capabilities. Notable features include Management Information 
Base II support, e-mail or pager event notification , and the ability to 
remotely monitor and configure the cache device. To ease administration, 
Cobalt Network's CacheRaQ 2 offers browser-based and command line... 
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building a strong foundation 

With tools such as inventory, software distribution and license metering, 
these desktop management suites can help you build a better network. 

Byline: TODD COOPEE 

Journal: Network World Page Number: 48 

Publication Date: January 31, 2000 
Word Count: 2211 Line Count: 217 



. . .Management (WBEM) . All the products we scrutinized offered hardware and 
software inventory; desktop configuration and remote control; and software 
distribution and license metering to a variety of clients . One product 
dabbled in antivirus protection, as well. Since our last look at these 
products in 1998, vendors have packed more useful features into their... 
metering support, but lets you integrate third-party products, such as ABC 
Systems & Development's LAN Licenser. Instead of providing active metering, 
LANutil32 offers license grouping , allowing you to determine which 

workstations on your network can install a specific application and 
flagging rogue systems that may have unauthorized software installed . The 
remaining products rely on a pool... 

desktops and usersMost of the products offer only limited 
desktop-configuration management tools. Attachmate's NetWizard Plus let us 
manipulate registry entries and enforce system policies on Windows 95, 98 
and NT systems. However, we had to install NetWizard' s Remote Registry 
Service on each system to make that happen. SMS countered with support for 
propagating user profiles and enforcing logon restrictions across all 
Windows clients. ZENworks offers printer management and extensible system 

policies for controlling who can use specific printing resources and how 
a desktop can be changed. All the products tested except LANut il32 offer 
some form of... options with other third-party product s . Novell bundles a 



6-month subscription to Network Associates antivirus software. Notable 
eventsAll the products provide some degree of event notification - for 
example, alerting you that a remote installation of software failed or 
that a license threshold has been exceeded, usually in the form of an alert 
box or an entry in a system log file. Intel's LANDesk leads the pack in 
this area, offering a bundle of alert actions. Depending on the event , 
you can initiate an e-mail message, load a NetWare Loadable Module, 
generate an SNMP trap or send a message to a pager. ZENworks also... 
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3Com, Nortel bolster switch families 

Byline: JIM DUFFY 

Journal: Network World Page Number: 12 
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Word Count: 696 Line Count: 68 

Text : 

...of the leading LAN switch vendors are ready to deliver on promises made 
when they announced their core offerings six to 18 months ago. The events 

also indicate that demand for the latest LAN switching technology 
remains healthy among large enterprise network customers despite year 2000 
concerns and vendors 1 emphasis on sales to... 

. . . enterprise net backbones, the switch is designed for service providers 
offering voice-over-IP, Web hosting or other data services requiring 
traffic classification and priority policies . Underneath the eight-slot 
Core-Builder 9000 in the 3Com booth was a 16-slot version of the switch 
running an embedded Windows NT module. The module is designed to add 
intelligence to the CoreBuilder 9000 switches by tightly linking 
frame- forwarding decisions to NT-based policies , directories, firewalls 
and other network service applications running on the embedded operating 
system module. 3Com announced plans to support embedded NT on its switches 
early this year. More where that came fromOver in the Gigabit Ethernet 
Alliance booth, 3Com was showing an unannounced SuperStack gigabit copper 
switch for server farm and workgroup aggregation. The switch features 
six 100/1000-TX ports and two lOOOBase-SX ports with RJ-45 and MTRJ jacks. 
3Com was also . . . 
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3Com to unveil mgmt. software 
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Text : 

. . . data from the agents and probes and presents the data as legible 
.information. The event manager also pinpoints potential problems using 
color-coded messages that indicate event severity. The event manager 
is tipped off to the severity of an event by predefined rules, thresholds 
or policies established by the network manager . Users can group or filter 
events based on severity, time of day, date, source and description . Traf fix 
Manage r 3.0... 

. . . users by identifying them via their media access control address, not 
the IP address. For increased scalability, Traf fix Manager 3.0 features DNS 
aggregation, which groups servers with the same name together as if 

they were one network device. This increases scalability by freeing more 



space in the Traffix Manager database because... 
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Using policies to tend the wile & woolly intranet 

With employees flocking to put information on the corporate Web, companies 
find themselves devising policies aimed in part at keeping merriment 
to a minimum. 

Byline: Elisabeth Horwitt 

Journal: Network World Page Number: 28 

Publication Date: August 12, 1996 
Word Count: 1660 Line Count: 155 

Text : 

... powerful new search engine like Digital Equipment Corp. ' s AltaVista 
(www.altavista.digital.com) and you get 20,000 possible links. 

Corporations with no formal policy for monitoring and reviewing 
.internal Web sites are in danger of having their intranets become equally 
as chaotic and difficult to navigate, Finkelstein says. "Just... 

. . .everyone should do Web applications. ' ' 

It's so easy to publish documents on a Web that some IT groups are deaf 
to the intranet explosion happening around them. Steven Telleen , 
director of Amdahl Corp.'s IntraNet Solutions Group in Sunnyvale, Calif., 
says he knows of some IT managers who set Web crawlers free on their nets 
and discovered twice as many internal Web servers than they knew about. 

The enlightened have been keeping a watchful eye on early intranet 
installations and then implementing formal policies when growth 
esca lates . 

At Allied Signal Corp., for instance, internal Web sites have been 
proliferating for some months now. This rapid growth has prompted the 
company's IS council to think about formulating a Web authoring policy , 
says Chuck Necker, Webmaster at the Computing Technology Center for Allied 
Signal's central business services unit in Torrance, Calif. 

But a sharp intranet growth. . . 
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... licenses, or $39 per node for 1,000 licenses. Attachmate: (206) 
644-4010. Innovative Software Development Co., a developer of systems 
management software for mid- range computers , has unveiled an 

enterprisewide management tool called Power Center. The package automates 
problem detection by correcting problems according to predefined policies 
It includes agents, called sensor packs, that monitor systems 
performance, disks, printers, processes and file systems, and notifies 

Power Center's Event Director when significant events occur. The Event 
Director determines whether corrective action should be initiated 
automatically or if manual intervention is needed. Power Center pricing. . . 
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IBM moves to establish open systems control 

Byline: Elisabeth Horwitt, CW Staff 

Journal: Computerworld Page Number: 4 9 

Publication Date: September 23, 1991 

Word Count: 884 Line Count: 64 

Text : 

... Facility to support Sun Microsystems, Inc. SunOS and Apple Computer, 
Inc. Macintosh workstations. The facility allows a VM to be programmed to 
back up a variety of workstations automatically and at specified 
intervals . 

IBM also aims to extend its Systemview platform to provide end-to-end 
ner. work support, Warner said. 

A new product called Systemview Automated Operations Expert is said to 
o ! .; ow users to incorporate formalized procedures and policies for 
responding to common systems and network events in an expert system. 
Automated applications based on Netview can then use the rules as the basis 
for responding automatically to such events , Warner said. 

For example, rules can be provided for determining the most probable 
cause of an event and taking action that minimizes impact to high-priority 
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...in more than 140 countries. 

Through the integration of i Jet's Worldlink service and Roadpost 1 s 
wireless communication services, travelers receive real-time, 
i. inerary-based 

alerts about events and conditions that may impact their trips. 

i NT ELS AT 

Signs Deal With Vodacom 

Intelsat South Africa (Pty) Ltd. signed a five-year contract with Vodacom 
International ... IDIQ contract by Spawar, of 

Charleston, SC, to supply tri-band satellite simulators. The simulators 
will be 

used for training personnel on the operation of various tri-band 
satellite 

terminals . If fully funded throughout a five year period the contract 
value will 
be $2.7 million. 
L-3 SATELLITE NETWORKS 
Acquires Wolf Coach 
L-3. . . 

. . .Analyzer is scalable software 

that collects critical performance and usage data over time. This data 
enables 

network managers to determine the most effective traffic-control policies 

and 

predict trends in the networks traffic patterns. 

Network Justice FairShare is a scalable quality of service software that 
guarantees fairness among users and applications while... 
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INGRES ASK 2 : Ingres releases first database to activate external events 

November 11, 1991 



...through SQL commands. 

The announcement also initiated Ingres' new strategy of offering 
enhancements to its entire suite of client-server products 
simultaneously across a wide range of platforms, including PCs , VMS 
minicomputers and all major Unix systems. 

INGRES Release 6.4 is the first relational database management 
system to provide database event alerters . Just as INGRES rules 
automatically trigger internal database procedures to enforce policies , 

event alerters automatically trigger external application programs 
through SQL commands. 

" Event alerters provide a simple way of capturing events that are 
a natural result of everyday business activities, and allow 
organizations to better model their business operations... 

15/3, K/33 (Item 1 from file: 610) 

DIALOG (R) File 610:Business Wire 

(c) 2004 Business Wire. All rts. reserv. 

00801772 20021029302B6855 (USE FORMAT 7 FOR FULLTEXT) 
ACE Limited Reports Third Quarter Results 

Business Wire 

Tuesday, October 29, 2002 18:22 EST 

JOURNAL CODE: BW LANGUAGE: ENGLISH RECORD TYPE: FULLTEXT 
DOCUMENT TYPE: NEWSWIRE 
WORD COUNT: 1, 4 30 

TEXT: 

. . . webcast , 

available on a listen-only basis, and the new financial supplement at 
http://www.acelimited.com. Please refer to our website under "Investor 
Info, Notices and Events one half hour before, for further log-in 
details. Individuals who access the webcast will be asked to identify 
themselves and their affiliation. A replay. . . 

. . .October 30, 2002 

until Wednesday, November 13, 2002, 11:30 p.m. EST. 

The ACE Group of Companies provides insurance and reinsurance for 
a diverse group of clients . The ACE Group conducts its business on a 
global basis with operating subsidiaries in nearly 50 countries. 
Additional information can be found at: http : //www . . . 

...set forth in these statements. 

For example, the Company's forward-looking statements concerning 
market fundamentals could be affected by changes in demand, pricing 
and policy term trends and competition. The Company's forward-looking 
statements could also be affected by the levels of new and renewal 
business achieved, market acceptance... 



Byline: 



Business Editors & Computer Writers 



. . . 11, 398 
Other assets 



7, 996 



7, 331 



Total assets 



$ 40,830 



$ 37,187 



Liabilities 

Unpaid losses and loss expenses $ 21,641 



$ 20,728 



Future policy benefits for life 

and annuity contracts 419 383 

Unearned premiums 5,526 3,853 

Other liabilities 6,485 5,805 



Total liabilities $ 34,071 $ 30... 861 

4 , 153 

Losses and loss 



expenses 


1, 328 


1, 542 


892 


3, 142 


3,448 


Life and annuity 












benefits 


60 


29 


29 


106 


58 


Policy acquisition 












costs 


253 


205 


204 


685 


559 


Administrative 












expenses 


250 


205 


205 


678 


602 



Underwriting income 

(loss) 34 (582) 55 250 (514) 

Net; investment income... 
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e-Security, Inc., the leading 

worldwide provider of Security Event Management (SEM) software, today 

announced that the world's leading premium cruise line, Holland America, 
has 

selected e-Security to provide comprehensive, real-time visibility into its 
enterprise security network... 

...solution to provide a 24x7 

dashboard view across its entire network security architecture and to 
■■onsolidate and organize any security "events" that arise in its multiple 
ope racing systems, Web servers , mainframe, databases and network devices. 

"We have a diverse IT environment, so finding a solution to instantly 
view, consolidate and correlate a variety of security. . . 

...it was absolutely essential," said Holland 

America Security Administrator Chad Hoggard. "e-Security ' s solution will 
help 

ensure there is common enforcement of our security policy across all of 
our 

platforms, and will guarantee that the right people, whether it's my 
security 

team or the IT helpdesk, are instantly made... 

...Security, Inc. "Our solution will give Holland America 

the visibility and control that will lead to more seamless, real-time 

enforcement of its corporate security policies . " 

About e-Security, Inc. 

e-Security, Inc. is the leading worldwide provider of Security Event 
Management software. The company works with large enterprises, government 
organizations . . . 
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. . . intensive 

process requiring a manual name search on printed lists," said Laura 
DeSoto, 

vice president of product management and marketing for Experian f s 
Information 

Solutions group . "Experian clients were faced with a difficult choice. 
Either they turned down questionable loan applications and lost revenue or 
went ahead and made the loans in the... 

. . .person, it does provide a warning flag indicating further 
investigation should be considered," said DeSoto. Experian strongly urges 
its 

customers to follow their own OFAC policy and procedures for handling the 
company's OFAC message indicators . 

"Given the tragic events of last September, we are pleased to provide 

this 

important service, which we believe will have a positive effect on the 
health 

of the American. . . 
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...of an organization's overall 

security program. We recommend that corporations implement flexible 
content 

filtering tools, like Web Inspector v6, to enforce their Internet usage 
policies and protect against reduced productivity, legal liability and 

network 
congestion . " 

"Elron Software worked extensively with customers to develop a new 

p rod uct 

that would meet their... 

...reliability, flexibility and ease-of-use. And, 

I'm thrilled to report that Web Inspector v6 exceeds clients' expectations 

by 

combining enterprise scalability with enhanced policy -based control and a 
wide 

array of reporting options," said Ray Boelig, CEO and president, Elron 
Software. "Web Inspector v6 enables companies to clearly see what is 

occurring on their networks and make informed business decisions to 
protect 

their assets, people and reputation." 



Key features of Web Inspector v6 include: 
-- Distributed Deployment 

To accommodate enterprise environments, Web Inspector can be 
deployed 

at multiple locations, all managed with centralized policy a 
reporting. This unified approach eliminates the need to update 
multiple 

servers every time a policy changes. 



